Below is a presentation I wrote back in 2005. I updated it to reflect new tools etc.
The custom scripts referenced in the presentation are available on the "Windows Volatile Information Collection" page, link below.