Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

COFEE (Computer Online Forensic Evidence Extractor)

Microsoft has reportedly developed a USB key that allows investigators to extract forensic data from PCs. COFEE (Computer Online Forensic Evidence Extractor) comes in a USB key form factor, and was distributed to a small number of law-enforcement agencies last June, the Seattle Times reports. The device includes 150 tools that allow investigators to extract internet history files, for example, or “decrypt passwords”. …

More (The Register)

Latest from Forensic Focus

Leave a Comment