Manyebook
Harlan Carvey
Windows Registry Forensics
Windows Forensic Analysis Toolkit
Windows Forensic Analysis