Add as a preferred source on Google


Microsoft Tries To Clean Up COFEE Spill

  • By Kurt Mackie
  • 11/12/09

Someone spilled hot COFEE, otherwise known as Microsoft's Computer Online Forensic Evidence Extractor.

The spill or leak was noted Nov. 9 in reports from CrunchGear and Ars Technica. COFEE is a computer forensics solution that Microsoft provides free to law enforcement agencies. It's really a collection of tools packaged together on a thumb drive for easy use by police on the scene of a crime.

Now, the software has somehow become expropriated, and it's found its way onto bit torrent sites.

Essentially, COFEE is now openly distributed as pirated software. The distribution was supposed to have been controlled through the National White Collar Crime Center or INTERPOL.

Microsoft confirmed the leak Tuesday, stating that it plans to "mitigate unauthorized distribution of our technology beyond the means for which it's been legally provided," according to a statement from Richard Boscovich, senior attorney for Internet safety at Microsoft Corp. He discouraged people from downloading pirated COFEE software--not just because it's an unauthorized distribution, but because the copies could have been modified.

Boscovich debunked the idea that pirates can now use the pirated COFEE software to "build around" its use by law enforcement agencies.

"Its value for law enforcement is not in secret functionality unknown to cybercriminals," Boscovich stated. "Its value is in the way COFEE brings those tools together in a simple and customizable format for law enforcement use in the field."

It's also possible that cyber crooks could use COFEE in the same way that law enforcement agencies do--to glean information from people's computers. That point wasn't addressed in Boscovich's statement.

Microsoft has claimed that law enforcement officers can learn to use COFEE in about 10 minutes. COFEE can run "more than 150 commands on a live computer system," according to a Microsoft government Web page. It's designed to capture information before a computer system is powered down and some information is lost.

Microsoft's Web page states that COFEE is designed to help law enforcement "in their fight against cybercrime, child pornography, online fraud, and other computer-facilitated crimes."

About the Author

Kurt Mackie is online news editor, Enterprise Group, at 1105 Media Inc.

Featured

  • laptop with digital productivity and calendar symbols

    September 2025 Tech Tactics in Education Conference Agenda Announced

    Registration is free for this fully virtual Sept. 25 event, focused on "Overcoming Roadblocks to Innovation" in K-12 and higher education.

  • stylized illustration of a desktop, laptop, tablet, and smartphone all displaying an orange AI icon

    Survey: AI Shifting from Cloud to PCs

    A recent Intel-commissioned report identifies a significant shift in AI adoption, moving away from the cloud and closer to the user. Businesses are increasingly turning to the specialized hardware of AI PCs, the survey found, recognizing their potential not just for productivity gains, but for revolutionizing IT efficiency, fortifying data security, and delivering a compelling return on investment by bringing AI capabilities directly to the edge.

  • robot brain with various technology and business icons

    Google Cloud Study: Early Agentic AI Adopters See Better ROI

    Google Cloud has released its second annual ROI of AI study, finding that 52% of enterprise organizations now deploy AI agents in production environments. The comprehensive survey of 3,466 senior leaders across 24 countries highlights the emergence of a distinct group of "agentic AI early adopters" who are achieving measurably higher returns on their AI investments.

  • file folder with glowing cloud symbol

    95% of IT Leaders Encounter Unexpected Cloud Storage Costs

    A recent report from Backblaze found nearly all large organizations face hidden cloud storage charges that limit flexibility and drive data lock-in.