{"data":{"id":"e93e89d7-c906-4b2b-81c0-e01b67aca625","title":"Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations","summary":"This research paper examines how attacker-controlled evidence can manipulate LLMs used in digital forensics, extending anti-forensic models to cover the reasoning layer. It proposes a taxonomy of attacks built from an objective, a technique, a payload location and a concealment method, and attributes the gap to a perception difference between deterministic tools, the human examiner and the model. The authors demonstrate three attacks against an LLM-assisted analysis pipeline that alter a reported conclusion, write attacker-chosen content to the analyst's workstation and cause outbound network traffic, each triggered only by text planted on a seized device.","solution":"Mitigations to these attacks are also proposed.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.29747v1","publishedAt":"2026-10-21T13:48:03.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LLM-assisted digital forensics pipeline"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T13:48:03.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}