Helix
Helix forensic OS
Helix is a Ubuntu live CD customized for computer forensics.
Helix has been designed very carefully to not touch the host computer in any way and it is forensically sound.
Helix also has a special Windows autorun side for Incident Response and Forensics.Downloading of the live CD is only provided as a complement to membership in the e-fense members-only forum.
An unsupported, older, no-cost version is available as well.
Helix is a highly useful toolbox. The dual mode is especially valuable, since quite a few system administrators are not that proficient in Linux.
Due to Helix being a live disc it is possible to run it on a “suspect” machine whilst the installed operating system remains inactive.
[Note: Helix is freeware / Helix3pro is shareware. Download Helix @ https://www.e-fense.com/store/index.php?_a=viewProd&productId=11