Op 3-5-2011 16:51, Dave Anderson schreef:
On Tue, 3 May 2011, Joachim Gwoke wrote:Ever visit the people at http://www.woodmann.com? They might offer some more answers.
Alternately you might have a look at the coroners toolkit and its successors, such as sleuthkit or Autopsy. Maybe these programs can do a little bit of what you want.

