Finally got around to reading this paper from 2011. It's giving me more Linux file recovery ideas... sans.org/reading-room/whitep…