Electronic Discovery Law

Microsoft Device Helps Police Pluck Evidence from Cyberscene of Crime

The Seattle Times, April 29, 2008
By Benjamin J. Romano, Seattle Times technology reporter

Microsoft has developed a small plug-in device that investigators can use to quickly extract forensic data from computers that may have been used in crimes.

The COFEE, which stands for Computer Online Forensic Evidence Extractor, is a USB "thumb drive" that was quietly distributed to a handful of law-enforcement agencies last June.  Microsoft General Counsel Brad Smith described its use to the 350 law-enforcement experts attending a company conference Monday.

The device contains 150 commands that can dramatically cut the time it takes to gather digital evidence, which is becoming more important in real-world crime, as well as cybercrime.  It can decrypt passwords and analyze a computer's Internet activity, as well as data stored in the computer.

It also eliminates the need to seize a computer itself, which typically involves disconnecting from a network, turning off the power and potentially losing data.  Instead, the investigator can scan for evidence on site.

More than 2,000 officers in 15 countries, including Poland, the Philippines, Germany, New Zealand and the United States, are using the device, which Microsoft provides free.

Read the full article here on the Seattle Times website.

Trackbacks (0) Links to blogs that reference this article Trackback URL
http://www.ediscoverylaw.com/admin/trackback/69715
Comments (0) Read through and enter the discussion with the form at the end
This blog/Web site is made available by the contributing lawyers or law firm publisher solely for educational purposes to provide general information about general legal principles and not to provide specific legal advice applicable to any particular circumstance. By using this blog/Web site, you understand that there is no attorney client relationship intended or formed between you and the blog/Web site publisher or any contributing lawyer. The blog/Web site should not be used as a substitute for competent legal advice from a lawyer you have retained and who has agreed to represent you.

K&L Gates includes lawyers practicing out of more than 40 fully integrated offices located in North America, Europe, Asia, South America, and the Middle East, and represents numerous GLOBAL 500, FORTUNE 100, and FTSE 100 corporations, in addition to growth and middle market companies, entrepreneurs, capital market participants and public sector entities. For more information about K&L Gates or its locations and registrations, visit www.klgates.com.

Portions of this Web site may contain Attorney Advertising under the rules of some states. Prior results do not guarantee a similar outcome.

e-Discovery Analysis & Technology group at K&L Gates, offering services related to ediscovery, review of electronic documents, electronic discovery and electronic evidence discovery.
K&L Gates LLP
925 Fourth Avenue, Suite 2900, Seattle, Washington 98104-1158
p. 206.623.7580, f. 206.623.7022