Microsoft has developed a small plug-in device that investigators can use to
quickly extract forensic data from computers that may have been used in crimes.
The COFEE, which stands for
Computer Online Forensic Evidence Extractor, is a USB "thumb drive" that was
quietly distributed to a handful of law-enforcement agencies last June.
Microsoft General Counsel Brad Smith described its use to the 350
law-enforcement experts attending a company conference Monday. The device
contains 150 commands that can dramatically cut the time it takes to gather
digital evidence, which is becoming more important in real-world crime, as well
as cybercrime. It can decrypt passwords and analyze a computer's Internet
activity, as well as data stored in the computer.
Good luck on this working against TrueCrypt (free whole drive encryption )
encrypted PC's ;-)