Well, Linux is probably more often used on the "investigator" side than the "investigated"... If you're a windows expert, a *good* programmer, and a linux user, you could perhaps look at beefing up aspects of windows support in open source forensic tools I guess, used often enough on linux to autopsy windows machines. See e.g. Sleuthkit.