Password recovery tools....mini-reviews?

Here's a couple of sites that will help get you started.

shmoo.com

itt.theintegrity dot net/pmwiki.php?n=ITT.XPPasswordRecovery

and another couple …

re MS related rainbow tables. what they can and cant do.
www dot decryptum.com/tech.html

www dot accessdata.com/common/pagedetail.aspx?PageCode=downloads

check the other pdf's too. useful info.

Kern

EnCase can also do a dictionary and a brute force attack on
Syskey,
Local User passwords
Domain User passwords
Master Keys ( SLOW! )