(3) indexing and storing disk images and metadata in a network-accessible repository, the network including analytical and search engines and other resources that allow analysts to access stored disk images and metadata, and encompass tools to conduct analyses on a single drive within a corpus, across a subset of drives within a corpus, across an entire corpus, and across a plurality of corpora.