I finally posted my Knoppix study and my new re-master called the Penguin Sleuth. You can find them at

www.linux-forensics.com

The Knoppix paper is in the publications section.

Thanks,
Ernie Baca
www.linux-forensics.com