Many in digital forensics seem to forget that the science part of digital forensics means experimentation and that implies a whole lot of things that most practitioners never learned.
"Science Column: Reconstruction: The Experimental Side of Digital Forensics,"
Journal of Digital Forensics, Security and Law: Vol. 8
, Article 3.
Available at: http://commons.erau.edu/jdfsl/vol8/iss4/3