
- Windows online forensics tool software#
- Windows online forensics tool password#
- Windows online forensics tool download#
"Regular or Decaf? Tool launched to combat COFEE"."Microsoft Computer Online Forensic Evidence Extractor (COFEE)"."Microsoft hosts its own police academy". "Microsoft's new product goes against crime: Meet (Hot) COFEE". "Microsoft's not bothered about COFEE leak". ^ a b "More COFEE Please, on Second Thought".^ "Microsoft COFEE law enforcement tool leaks all over the Internet".^ "INTERPOL initiative with Microsoft aims to raise global standards against cybercrime through strategic partnership with IT sector".^ "Microsoft Calls on global public-private partnerships to Help in the Fight Against Cybercrime (Q&A with Tim Cranton, Associate General Counsel for Microsoft)"."Microsoft device helps police pluck evidence from cyberscene of crime". ^ a b c d "Brad Smith: Law Enforcement Technology Conference 2008".Detect and Eliminate Computer Assisted Forensics ( DECAF)

It also recovers data stored in volatile memory which could be lost if the computer were shut down.
Windows online forensics tool password#
ĬOFEE includes tools for password decryption, Internet history recovery and other data extraction. Estimates cited by Microsoft state jobs that previously took 3–4 hours can be done with COFEE in as little as 20 minutes. A further interface generates reports from the collected data. First COFEE is configured in advance with an investigator selecting the data they wish to export, this is then saved to a USB device for plugging into the target computer.
Windows online forensics tool software#
The software is reported to be made up of three sections. It contains 150 tools and a graphical user interface to help investigators collect data. The device is activated by being plugged into a USB port.
Windows online forensics tool download#
Microsoft confirmed the leak, however a spokesperson for the firm said "We do not anticipate the possible availability of COFEE for cybercriminals to download and find ways to ‘build around' to be a significant concern". Analysis of the leaked tool indicates that it is largely a wrapper around other utilities previously available to investigators. On November 6, 2009, copies of Microsoft COFEE were leaked onto various BitTorrent websites.

The National White Collar Crime Center has been licensed by Microsoft to be the sole US domestic distributor of COFEE. University College Dublin's Center for Cyber Crime Investigations in conjunction with INTERPOL develops programs for training forensic experts in using COFEE. In April 2009 Microsoft and INTERPOL signed an agreement under which INTERPOL would serve as principal international distributor of COFEE. Ī case cited by Microsoft in April 2008 credits COFEE as being crucial in a New Zealand investigation into the trafficking of child pornography, producing evidence that led to an arrest. The device is used by more than 2,000 officers in at least 15 countries. Fung conceived the device following discussions he had at a 2006 law enforcement technology conference sponsored by Microsoft.
