Josh - You can have the best of both worlds. Boot to a spare HD or Target boot, use Disk Utility and take a DMG of the hard drive as it sits now. You can move t

Josh - You can have the best of both worlds. Boot to a spare HD or Target boot, use Disk Utility and take a DMG of the hard drive as it sits now. You can move that to where ever you want to examine the contents. This frees up the drive for reloading the OS (and this is a must if you suspect foul play) and you can examine at your leisure knowing you have an exact image of the drive. If you are in the Bay Area, CA, I would be happy to help over coffee. Contact info in profile.