Disk encryption password handover plausible deniability

Can we do better than "wrong password implies random bytes"?

Can the last disk access times be checked via forensic methods?