Preliminary research

Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations

Frank Breitinger, Jan Gruber, Christopher Hargreaves, Jan-Niclas Hilgert, Gaëtan Michelet and Mark Scanlon · arXiv · 21 October 2026

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Classifies forensic-evidence prompt injection by objective, technique, location, concealment and differences between human, tool and model readers. Autopsy case studies alter conclusions and exercise added file/network capabilities; effects depend on discovery, permissions and tool approval.

Record

Researcher

Frank Breitinger, Jan Gruber, Christopher Hargreaves, Jan-Niclas Hilgert, Gaëtan Michelet and Mark Scanlon

Published by

arXiv

Date

21 October 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Research artifacts

Tags

• prompt-injection
• ai-agent
• mcp
• forensics
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Frank Breitinger, Jan Gruber, Christopher Hargreaves, Jan-Niclas Hilgert, Gaëtan Michelet and Mark Scanlon, first published at the original source. Preserved copies are kept so the citation survives its host.