Computer Online Forensic Evidence Extractor User Guide [COFEE]

User Guide for COFEE v1.1.2

Computer Online Forensic Evidence Extractor (COFEE) is software for a USB flash drive for investigators for quick extraction of forensic data from computers using Windows operating systems that are suspected to contain evidence of criminal activity.

It allows investigators to search through data onsite as an automated forensic tool. The device is activated by being plugged into a USB port, and purportedly contains 150 commands that can dramatically cut the time it takes to gather digital evidence (some estimates state that a job that previously took 3-4 hours can be done with COFEE in as little as 20 minutes).

These commands offer such functions as the ability to decrypt passwords, search a computer's Internet activity, and analyze the data stored on a computer including data stored in volatile memory, which could be lost if the computer were shut down for transport to a lab.

I am unable to make available here anything related beyond this User Guide, due to the ConCen Site Rule: "No software, cracks or serials."