Manual discovery is fun, 'til you have to sift through 1TB of data looking for it, and hidden TC containers, and rootkits, and and and and... Gets tedious, and inaccurate, quickly!
I've had to do static analysis of memory images paired up with FPGA's for certain types of hardware. Yeah...It drains the life out of you.