Back to Case Studies
Expert Witness & Testimony Digital Forensics Internal Investigations

When the Documents Don’t Match the Story

When questions arose about the authenticity of key documents, a forensic review revealed whether the records had been created, modified, and used in the manner claimed.

A dispute centered on the authenticity of key electronic evidence, including emails and other documents. Questions had been raised about when the documents were created, whether they had been modified, and whether they accurately reflected the events being described.

The client needed an independent forensic analysis to determine whether the records were authentic and if the available evidence supported the timeline being presented.

Aletheian Labs examined the documents themselves as well as the systems on which they were created, stored, and used.

The investigation included analysis of document metadata, email records, system artifacts, user activity, and other digital evidence that could help establish when the documents were created and whether they had been altered. The team did not rely on a single source of information and instead compared multiple data points to test whether the claimed history of the documents was consistent with the available findings.

The Breakthrough

  • Identified inconsistencies between document metadata and the timeline being presented
  • Detected signs of modification within electronic documents and email records
  • Determined that certain documents could not have been created on the dates claimed
  • Correlated system activity, user behavior, and file history to establish a more accurate timeline
  • Provided an independent expert opinion regarding the authenticity of the disputed records
  • Equipped counsel with forensic evidence to evaluate the reliability of key documents in the case