Do you know if when booting with "forensic" option (so, read-only mounting my pendrive) is possible to remount as read-write later?. If I understand it well, if my pendrive is /dev/sdb1 and /dev/sdb...