Cryptome has posted Microsoft’s forensic toolkit known as COFEE.

You can get it here.

The user guide is here.

This is meant to be used on a thumb drive and is for tinkering purposes only.