At that point, you might as well hack into their laptop, put a bunch of CP on there, and then call the cops.
Forensic analysis of the hard drive would exonerate you though.
Forensic analysis of the hard drive would exonerate you though.
No. Anything an analyst could feasibly look at can be spoofed with root access. The only thing that could potentially approximate the actual age of a hard drive write is thermal annealing of the storage medium, but this isn't really true anymore with SSDs (and was never practical even for HDDs).
I'm not saying it's impossible, but it sounds pretty difficult to me. Maybe I'm wrong though.