Computer Online Forensic Evidence Extractor

Computer Online Forensic Evidence Extractor (abbreviated to COFEE ) is a forensic framework that was developed by Microsoft . It is designed to help law enforcement agencies extract evidence from windows based computers. It works automatically during the backup and has auxiliary programs for documentation and preparation of the reports to be created.

Microsoft is making the program and support free to US and Canadian law enforcement agencies.