Create an investigative toolkit. What tools would you have in your toolkit? Document the following:

* the features of each tool * how much does each tool cost (if applicable) * advantages/disadvantages

An example would be:

The SANS Investigative Forensic Toolkit ("SIFT") is a computer forensics VMware appliance that is pre-configured with all the necessary tools to perform a detailed digital forensic examination.