Microsoft Forensic Tool in the Hands of Hackers -- Redmondmag.com

Barney's Blog

Microsoft Forensic Tool in the Hands of Hackers

Microsoft has a special computer forensics tool designed only for law enforcement. Now, the Computer Online Forensic Evidence Extractor (COFEE) has been leaked on the Internet, and the fear is that hackers can use the tool to sidestep these very forensic techniques.

The tool is designed to nab computer information including evidence of child pornography and other crimes -- the same approach I see on every other episode of "Law & Order."

This may not be a huge deal. Hackers already have plenty of tools for snooping, and I'm not sure having COFEE out in the wild is a game changer. Tell me where I'm wrong at [email protected].

Posted by Doug Barney on 11/16/2009 at 1:17 PM

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.