"Computer sleuths interested in running forensic PC operations
on a Linux machines should take a look at an open source tool
called Foremost.
"Written by agents in the U.S. Air Force Office of Special
Investigations, Foremost can read through files and file headers on
PCs or copied PC hard disk images..."