"We're going to show you how to mimic Microsoft's offering (Computer Online Forensic Evidence Extractor) using open-source software to unlock Windows accounts, investigate suspicious activity, see any file on a Windows disk and even peruse files that others believe have been permanently deleted." (more)
Quick Take...
• Grab an old USB stick. (2GB or more)
• Read the directions. (here)
(ta-daaaa!)
• Now pretend you are William Petersen