cs.CRFeb 22, 2026

Evaluating the Reliability of Digital Forensic Evidence Discovered by Large Language Model: A Case Study

Authors: Jeel Piyushkumar Khatiwala, Daniel Kwaku Ntiamoah Addai, Weifeng Xu

Organizations: School of Criminal Justice, College of Public Affairs, University of Baltimore, Maryland, USA

Abstract

The growing reliance on AI-identified digital evidence raises significant concerns about its reliability, particularly as large language models (LLMs) are increasingly integrated into forensic investigations. This paper proposes a structured framework that automates forensic artifact extraction, refines data through LLM-driven analysis, and validates results using a Digital Forensic Knowledge Graph (DFKG). Evaluated on a 13 GB forensic image dataset containing 61 applications, 2,864 databases, and 5,870 tables, the framework ensures artifact traceability and evidentiary consistency through deterministic Unique Identifiers (UIDs) and forensic cross-referencing. We propose this methodology to address challenges in ensuring the credibility and forensic integrity of AI-identified evidence, reducing classification errors, and advancing scalable, auditable methodologies. A comprehensive case study on this dataset demonstrates the framework's effectiveness, achieving over 95 percent accuracy in artifact extraction, strong support of chain-of-custody adherence, and robust contextual consistency in forensic relationships. Key results validate the framework's ability to enhance reliability, reduce errors, and establish a legally sound paradigm for AI-assisted digital forensics.

Figures & tables

Explore similar work

CardsList
  1. Trustworthy Image Authentication using Forensic Knowledge Graphs

    Jun 22, 2026Tai D. Nguyen, Matthew C. StammImage Forgery DetectionDigital Image Forensics

  2. Automating Cloud Security and Forensics Through a Secure-by-Design Generative AI Framework

    Apr 5, 2026Dalal Alharthi, Ivan Roberto Kawaminami GarciaCybersecurityDigital Forensics

  3. AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation

    Jul 17, 2026Saifur Rahman Tamim, Amir Labib KhanWatermark RemovalText Watermarking