I imagine the US has a much larger problem with this issue than other countries because of the way their justice system works.

[quote="NeriMatrixx"]Hi Everyone, I am a newbie in DF.

I recently came across a MC questions that asked.... "[i]can Resident file data be hash[/i]"? To which I answered No; would my answer be corr ...

In X-Ways pretty much anything is possible through x-tensions

Paragraph 81:
Opinions differ on the appropriateness of the accreditation regime for digital
forensics. Lorraine Turner, Business Development and Technical Director
at UKAS, stated her belief that ...

X-Ways Forensics does a good job of rebuilding RAID systems and then lets you create an image file of the rebuilt RAID to stop you having to rebuild it in the future.

Encase is pretty bad for non-windows file systems.

In terms of OS X Analysis, Blacklight is probably the most comprehensive tool in terms of artifacts recovered and is probably your only viable opt ...

Again never has an XFS partition, however X-Ways does support it:
http://www.x-ways.net/forensics/

If they support it, I'm pretty sure you can carve files using it!