Guidelines and Questionnaires for a User Study on Live Timestamp Tampering in Digital Forensic Event Reconstruction

This dataset comprises the questionnaires and guidelines used in a user study on live timestamp tampering. In this user study, participants were asked to complete questionnaires, participate in interviews, and perform a tampering task, in which they acted as adversaries attempting to swap two events that occurred on a computer to cover their tracks. This dataset includes all materials to reproduce this user study: a pre-tampering questionnaire to assess participants' backgrounds, instructions for the tampering task scenario, a post-tampering questionnaire to capture participants' strategies and reflections, and semi-structured interview guidelines. This repository does not contain any actual results of this project but only the necessary details to reproduct this user study on live tampering.

The structure and details of the user study guidelines and questionnaires uploaded in this repository can be found in the README.txt file.

Version 1.0

Vanini, C., Gruber, J., Hargreaves, C. J., Benenson, Z., Breitinger, F., & Freiling, F. (2025). Guidelines and Questionnaires for a User Study on Live Timestamp Tampering in Digital Forensic Event Reconstruction (Version 1.0) [Data set]. UNIL data service. https://doi.org/10.48657/ydrk-qa98

f01aee8e8b156ff0131b0b11f3625c1a