RT @davehull: Using evidence cleaners to find artifacts via @matt_churchill on the SANS Digital Forensics Blog: http://bit.ly/dAsMLl [neat!]