Forensic carving of network packets and associated data structures
Forensic feature extraction and cross-drive analysis