Understand short-lived software update tampering and build a useful evidence timeline, with a fictional scenario and questions to ask suppliers.