Microsoft has revealed that, since June 2007, multiple law enforcement agencies have been using a forensic device it has developed that can bypass security on a Windows-powered machine and extract data for use in criminal investigations. Called COFEE - Computer Online Forensic Evidence Extractor - the gadget is apparently a USB thumb-drive onto which Microsoft have loaded 150 'commands' that can, among other things, decrypt passwords, display internet activity, and uncover all data stored on the computer. Most importantly, it can do this on-site, rather than an investigator needing to remove a machine during a search or raid and send it to a lab for analysis.
Read The Full Story