some distros have multiple forensic files
move common distributions to top.
Merge pull request #6 from bcoe/centos-65-fix

some distros have multiple forensic files