Due to copyright restrictions, some essential pieces of software cannot be included in the Incident Response section of DART.
In order to work properly, some toolkits need to be completed by the final user:

1) mac-ir.sh (\apps\IR\mac)
To create a toolkit for live IR on OSX, we recommend to follow the instructions published by Tom Webb on his blog:
https://irhowto.wordpress.com/2010/08/07/creating-a-os-x-live-ir-cd-rom/
Obviously, you need to collect the binaries from a fully trusted machine.

2) Sysinternals Suite (\apps\IR\SysInternals)
Download the latest version of SysinternalsSuite.zip from
http://technet.microsoft.com/it-it/sysinternals/bb842062
and unzip it in \apps\IR\SysInternals.

3) tr3secure  (\apps\IR\tr3secure)
Follow the instructions included in the \apps\IR\tr3secure\read_me.txt file.

4) Windows Forensic Toolchest (\apps\IR\wft)
If you want to use the standard configuration file wft.cfg provided by FoolMoon, you need to collect several tools from respective authors. 
Use the wft.cfg file itself as a checklist for the missing components, or simply comment the rows you don't need to use.
Microsoft's binaries (such as cmd.exe, net.exe, ipconfig.exe etc.) needs to be collected from a very trusted machine. 
You need to do it for every version of Microsoft Windows you will like to use as target system. Put the binaryes in the appropriate subdirectory, p.e.
\IR\xp for Windows XP
\IR\2k3 for Windows 2003
\IR\vista for Windows Vista 
and so on.
For every binary file you intend to include in your toolkit, remember to compute MD5 and SHA1 hashes and update those values in the configuration file.
Some binaries (such as Cygwin's and Nirsoft's) are already part of DART, you just need to verify relative paths and hashes.

-----
Other tools you probably want in your toolchest:

- MoonSols Windows Memory Toolkit
http://www.moonsols.com/products/

- EDD
http://info.magnetforensics.com/encrypted-disk-detector

- TZWork Products
http://www.tzworks.net/download_links.php

- Agent Ransack
http://www.mythicsoft.com/agentransack/
(It needs some workarounds to become portable)