The Russian National Hi-Tech Crime Unit recently created a nifty little
program called 'Forensic
Assistant' or '0xFA' that was designed to easily locate and analyse
artifacts scattered around the system such as various types of IM
conversations, index.dat, .lnk, pf, registry files, etcetera.
