LinkBack URL
About LinkBacks
Reply With Quotealexlloyd54, bebe, BonezOz, dalturbo, davidelon, MajedRayan, McRip, P.KID, ThiD
COFEE Microsoft Forensic Tool Download
COFEE is a forensics tool, approximately 15MB in size that fits on a USB drive for law enforcement officials to use in PC forensics.
With COFEE, law enforcement agencies without on-the-scene computer forensics capabilities can now more easily, reliably, and cost-effectively collect volatile live evidence. An officer with even minimal computer experience can be tutored—in less than 10 minutes—to use a pre-configured COFEE device. This enables the officer to take advantage of the same common digital forensics tools used by experts to gather important volatile evidence, while doing little more than simply inserting a USB device into the computer.
COFEE can be used to locate parts of a computer's hard drive that criminals could use for identity theft, online fraud, child pornography and other such crimes. It is designed to be easy to use and quick for law enforcement officials. The small program contains 150 commands which simplify and speed up the process of data retrieval. According to a Microsoft spokesperson "an officer with even minimal computer experience can be tutored—in less than 10 minutes—to use a pre-configured COFEE device."
COFEE requires Windows XP for configuration however, it does have some Windows Vista support. According to company insiders, Microsoft is developing a new version of COFEE which will be released next year that fully supports Windows Vista and Windows 7.
Download Cofee
Download COFEE (extracted) - no install required
If you own copyright to this material and wish for the download to be removed, please contact us.
alexlloyd54, bebe, BonezOz, dalturbo, davidelon, MajedRayan, McRip, P.KID, ThiD
I wonder if this new tool could bypass bitlocker?
Need help with something?
Text message me at [ xzkingzxburnzx @ txt.att.net ] or send a picture / video to here [ xzkingzxburnzx @ mms.att.net ]. Also via private message.
Sign up for Dropbox, you'll get 2GB's of online storage plus 250MB's for free!
I was reading about this in my law class the other night. Glad to see that MS can lend a hand to law enforcement agencies.
awsome thank u
I don’t think this tool can bypass bit locker as its designed for XP, however ive read articles that Microsoft do have tools to do such a thing.
This particular doesn't seem so great. Ran against my XP system it just dumps out a bunch of practically useless info, most of which can be gotten with other tools. It doesn't even dump the useful stuff like the SAM hashes or anything! But because this software is Microsoft every institute of learning will claim this software is the best ever.
I've just download it to give it a try, but I recall reading an article (somewhere on the web) claiming that this tool is not an actual Microsoft tool cause it doesn't look like their products!
Thank you for sharing.
Nobody is perfect, I'm Nobody!
It is a MS tool (just have a look at the license), however I think, they didn't take it too serious, because there are other tools which get more data, are invisible and so on. However, it's a nice thing to play with ;-)
The tool is designed to be used by people who don’t know much about computers at all aka some police officers, Cofee it will dump any info that might be lost if the computer is shutdown (such as its ip address for example) so the computer can be shutdown and then taken to a forensics lab where professionals will have the tools to do a proper examination.
That is my understanding of what Cofee is designed for anyway.
Tried to run install with COFEE v1.1.2 Installer.msi, and getting "parameter incorrect" popup...
any recommendations?
Also, the "extracted" copy has multiple files with some malware/viruses...
Can anybody post a "clean" copy?
Its a false positive, scanned it myself and its clean.
As for your problem im not sure, did you run the installer on Windows XP with admin rights?
extracted working fine...
the install still has the issue, I have tried it on different comuters, XP, Vista - no luck, could it be that it is locked somehow?
Thanks a lot!
and yes, I logged as admin...
and THIS right here makes me more afraid of the world,
and make me wan't to move to Apple ASAP
Originally Posted by Marcus Johnson
What, do one of those apply to you?
PS3: 80GB BC Firmware: 3.55NFWv3 Cobra Edition
360: 120GB No modifications.
If you are scared of such a basic program like this then you really should look at http://www.guidancesoftware.com and Forensic Toolkit (FTK) Computer Forensics Software | AccessData | AccessData.com then never use a computer again
Phone: Galaxy Nexus - 16gb - s-off & rooted - running Android 4.0.4
Tablet: Asus Transformer Prime - 32gb - rooted - running Android 4.0.3
360: Jasper - 1tb drive - jtag hacked running the 14699 dash (thanks to XeBuild 1.00)
360: Falcon - 250gig drive hacked with hddhackr, not flashed
Have a question or need help? Post on the forum, thats why it's here. I will only reply to Digiex related issues via PM, not general help requests.
If i helped you say thanks by signing up for Dropbox with my referral link, we will both get an extra 500mb of space for free.
Posting Permissions
Bookmarks