Originally Posted by jaffy1229

Here's a scenario. Lets say my computer is being examined by the police. If they tamper with any of the information on the hard drive, could they do so without leaving any evidence of what they have done?

For example, what if they changed a filename to read something else to make it look incriminating? How could you prove independently, that filename was changed? (or not)

Cheers,
jaffy