On the examination of hard drives: Looking in the wrong direction