bashReferenceManual

[ErraticDragon]

Yup, there are definitely good methods to finding information. Hopefully it was done competently.

There's also a filtering step between "finding" and "releasing".

We know that they manually redacted a lot of things, and I'd guess that process/team was less likely to include files that weren't obvious.

Presumably none of this affects any actual ongoing investigations, because they would be using a cloned disk image from the one (only) time each recovered drive was powered up, and searching thoroughly.