This is a little more advanced but you could download this ISO image, use it to create a Linux boot CD that has a ton of forensics tools on it and boot it up on the system you want to analyze.
...