#COFEE SOFTWARE SOFTWARE#

#COFEE SOFTWARE SOFTWARE#

It does this by presenting a simple user interface and running copies of other software programs contained on the USB device to collect data. The program is intended to use minimal resources so as to alter as little as possible in the operating environment while allowing the collection of data such as the process, file, and network status, and so forth. Thus this limited review of the situation is suited to this special end-of-year edition.ĬOFEE is, according to its documentation, a collection of programs residing on a mountable media (typically a USB disk drive emulation) designed so that when the USB device is placed in a computer, the COFEE program executable can be run by the investigator. While a big deal has been made of the secrecy of this tool and other related matters, reasoned examination has been somewhat lacking in the open community, even though there have been validation studies undertaken of the tool. It was held closely by law enforcement for a period of time until it was revealed in the last year, and subsequently, several individuals released software intended to defeat the utility of COFEE. Computer Online Forensic Evidence Extractor (COFEE) is a software program developed by Microsoft for use by law enforcement.

Cofee software