2 pointsby indigodaddy11 hours ago1 comment
  • ksaj3 hours ago
    I used to use Linux to scan hard drives for key words, and inspect the results, before plugging offsets to the "good hits" into Encase. Pretty much the entire investigation would be done with Linux, and then only the necessary results redone directly (no searching, etc) with Encase. It saved me hours.