{"id":2143,"date":"2008-06-11T12:48:46","date_gmt":"2008-06-11T12:48:46","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"2008-06-11T12:48:46","slug":"en-US","status":"publish","type":"post","link":"http:\/\/fourthamendment.com\/?p=2143","title":{"rendered":"Easier computer searches with Microsoft&#8217;s COFEE (Computer Online Forensic Evidence Extractor)"},"content":{"rendered":"<p>I obviously missed the first story on this:  Microsoft has created a USB based device for forensic searching of computers at the scene where they are found to copy information from them. It is called COFEE for Computer Online Forensic Evidence Extractor, and it is provided to law enforcement agencies for free. [And how long before police officers use it for personal investigations?]  See Seattle-Times: <a href=\"http:\/\/seattletimes.nwsource.com\/html\/microsoft\/2004379751_msftlaw29.html\">Microsoft device helps police pluck evidence from cyberscene of crime<\/a>:<\/p>\n<blockquote><p>Microsoft has developed a small plug-in device that investigators can use to quickly extract forensic data from computers that may have been used in crimes.<\/p>\n<p>The COFEE, which stands for Computer Online Forensic Evidence Extractor, is a USB &#8220;thumb drive&#8221; that was quietly distributed to a handful of law-enforcement agencies last June. Microsoft General Counsel Brad Smith described its use to the 350 law-enforcement experts attending a company conference Monday.<\/p>\n<p>The device contains 150 commands that can dramatically cut the time it takes to gather digital evidence, which is becoming more important in real-world crime, as well as cybercrime. It can decrypt passwords and analyze a computer&#8217;s Internet activity, as well as data stored in the computer.<\/p>\n<p>It also eliminates the need to seize a computer itself, which typically involves disconnecting from a network, turning off the power and potentially losing data. Instead, the investigator can scan for evidence on site.<\/p><\/blockquote>\n<p>It has been around <a href=\"http:\/\/www.slashgear.com\/microsoft-cofee-security-key-sucks-criminal-data-from-locked-down-pcs-2911404.php\">since <em>last<\/em><\/a> <a href=\"http:\/\/www.crunchgear.com\/2008\/04\/29\/microsoft-develops-usb-gadget-that-extracts-criminals-computer-data\/\">June<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>b2evALnk.b2WPAutP <a class=\"more-link\" href=\"http:\/\/fourthamendment.com\/?p=2143\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"","ping_status":"pingsdone","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-2143","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"http:\/\/fourthamendment.com\/index.php?rest_route=\/wp\/v2\/posts\/2143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/fourthamendment.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/fourthamendment.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/fourthamendment.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/fourthamendment.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2143"}],"version-history":[{"count":0,"href":"http:\/\/fourthamendment.com\/index.php?rest_route=\/wp\/v2\/posts\/2143\/revisions"}],"wp:attachment":[{"href":"http:\/\/fourthamendment.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/fourthamendment.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2143"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/fourthamendment.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}