if you need nix based forensics tool, you could always use TCT...

-w0rm3y