Dennis Faas's picture

MS Evidence Extractor 'COFEE' Leaked via File-Sharing

Software designed by Microsoft to help law enforcement individuals access encrypted data has been leaked onto the web and available to the public via file-sharing services. The software, which is illegal for unauthorized people to use or download, ... brings together a number of common digital forensics capabilities into an easy-to-use automated tool. The software is known as the Computer Online Forensic Evidence Extractor (or COFEE ) and allows police to easily capture important "live" computer evidence at the scene in cybercrime investigations, without special forensics expertise. (Source: ... (view more)

Dennis Faas's picture

Microsoft Device Extracts Forensic Data

Microsoft has reportedly developed a small plug-in device that can be used by investigators to quickly extract forensic data from computers that may have been used in crimes. The Computer Online Forensic Evidence Extractor (COFEE) is a USB "thumb ... drive" that Microsoft quietly distributed to a handful of law-enforcement agencies last June. The COFEE device contains 150 commands that dramatically cut the time it takes to gather digital evidence. It can decrypt passwords and analyze a computer's Internet activity and data stored in the computer. COFEE lets the investigator scan for evidence on ... (view more)

Subscribe to RSS - cofee