Fundamental Computer Investigation Guide For Windows

http://www.microsoft.com/technet/security/guidance/disasterrecovery/computer_investigation/default.mspx