http://blogs.technet.com/b/rhalbheer/archive/2009/11/10/cofee-freely-downloadable-on-the-internet.aspxYou definitely have heard of COFEE (Computer Online Forensic Evidence Extractor) which we make freely available to Law Enforcement through Interpol and NW3C. Now, the probably unavoidable happened and the tool leaked to the Internet. There was actuallyen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/rhalbheer/archive/2009/11/10/cofee-freely-downloadable-on-the-internet.aspx#3293175Wed, 11 Nov 2009 18:31:27 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3293175Hans Van de Looy<p>If it essentially is a collection of digital forensic tools already commonly used around the world. Then why would it be illegal to study this set? And why is it only available for law enforcement? Why not provide security professionals with this tool as well?</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3293175" width="1" height="1">http://blogs.technet.com/b/rhalbheer/archive/2009/11/10/cofee-freely-downloadable-on-the-internet.aspx#3292941Tue, 10 Nov 2009 21:52:24 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3292941Prefect<p>The version floating around doesn't show characterisitcs of having modification. This is not much of an issue, COFEE is basically a collection of sysinternals tools and OS utilities. &nbsp;Full analysis:</p> <p><a rel="nofollow" target="_new" href="http://praetorianprefect.com/archives/2009/11/more-cofee-please-on-second-thought/">http://praetorianprefect.com/archives/2009/11/more-cofee-please-on-second-thought/</a></p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3292941" width="1" height="1">