Microsoft has revealed some interesting info. Since June 2007, multiple law enforcement agencies have been using a forensic device it has developed that can bypass security on a Windows-powered machine and extract data for use in criminal investigations.

It’s named COFEE, for Computer Online Forensic Evidence Extractor. The device is a USB thumb-drive armed with 150 “commands” that can do all sorts of things like decrypt passwords, display internet activity, and uncover all data stored on the computer. The most important aspect is that it can do all of this on-site, instead of having to remove the machine during a search or raid and send it to a lab.

[Seattletimes] VIA [Slashgear]