Helix is a customized distribution of the Knoppix Live Linux CD. Boot the CD and you have Helix. You can use in online or offline (while Windows is running or when booting fresh from CD) to spy all kind of useful information from the Windows host system.
Helix is also used by
SANS for training in Track 8: System Forensics, Investigation and Response.