Remember #DFIR folks, mount dirty EXT3/4 file systems with "-t ext4 -o noload,..." Works like a champ!