Tag: Forensic investigation confirms tampering