On the SANS Forensics blog, my post: 'When “Redundant” Yields Different Results' http://bit.ly/b4bhh