http://goblock-home.blogspot.com/2011/02/backtrack-4-forensics-capabilities.html