I have used Helix extensively, and actually wrote this tool because I was unhappy with what Helix provided, although it was a good start. Helix's Windows IR script dumps all the information gathered into a single file, making it rather difficult to read. This tool redirects output into several files, which make it a lot easier to present the information obtained ASAP. I am trying to create a tool which will nicely subdivide the information into easily readable chunks. The end goal is to have this tool create an HTML report which will be ready for a presentation immediately after the response script is run, which would be viewable in a frameset of some kind. I believe this will be signifigantly more readable and useable than the output Helix provides.

As for WFT, I have not had a chance to try it. It's high on my priority list, though.

The instructions in the readme file are primarily for testing the script, however you are quite right in that it should not recommend copying files onto the victim machine. That will be fixed shortly.

I wasn't being too serious in my previous post. That's just something I say a lot, but something that doesn't come out too well on a web forum, I guess. I do appreciate the criticism.