Notes:
Grave-robber part of coroners toolkit released August 1, 2000
Strings all directories - yields deleted filenames
Grabs all MAC times
Finds deleted files that were still running or open
Pcat - recovers all images of running files in memory
Grabs interesting config files