This looks interesting, Helix Incident Response & Forensics live CD is a variant of the Knoppix live CD customised for computer forensics and incident response.