RT @sans_isc: [Diary] Forensics: Mounting partitions from full-disk "dd" images http://tinyurl.com/pb8ytp [so useful!]