Torrents of Microsoft COFEE have been springing up everywhere and the hype is ridiculous. Obviously, it’s illegal to pirate software. Furthermore, the EULA for this particular software is limits it’s use to law enforcement officials only. Other than that, most everything else you’ve heard about this stuff is false.
COFEE, or Computer Online Forensic Evidence Extractor, is a set of tools and a GUI that Microsoft has created to assist undereducated law enforcement officials with basic computer forensics.
An officer with even minimal computer experience can be tutored—in less than 10 minutes—to use a pre-configured COFEE device.
This is not some wild, as-seen-on-tv, NSA creation. It’s just a compilation of tools (about 150 or so) for information and evidence gathering. A rootkit and some automation. Most everything included with COFEE is available, in some form, all over the internet.
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_c.png?x-id=ac9516d0-70a2-4d35-9a8c-315ed7d76159)
See your KEYWORD in this post? We'll link it to your site!
Purchase an Intext Link
2 Comments
agreed, many tools that have been freely available (helix, ircr, ftk, wft, etc) perform the same basic functionality, many are more in-depth since they target technical folks, unlike COFEE which target audience is non-technical law enforcement. as for the XP only compatibility, this make sense as Vista and Win 7 did away with protected storage, where on would find IE history, saved passwords, etc.
http://praetorianprefect.com/archives/2009/11/m...
agreed, many tools that have been freely available (helix, ircr, ftk, wft, etc) perform the same basic functionality, many are more in-depth since they target technical folks, unlike COFEE which target audience is non-technical law enforcement. as for the XP only compatibility, this make sense as Vista and Win 7 did away with protected storage, where on would find IE history, saved passwords, etc.
http://praetorianprefect.com/archives/2009/11/m...