More From This User
User Guide for COFEE v112
Microsoft COFEE User Guide v1.1.2
User
Guide
for
COFEE
v1.1.2
Release
Date:
September
2009
Copyright
Reserved
ii
Table
of
Contents
Introduction
..................................................................................................................................................
1
What
is
COFEE?
.........................................................................................................................................
2
Digital
Forensics
Attributes
and
Principles
...........................................................................................
2
Volatile
Information
Collected
..............................................................................................................
2
Why
Use
COFEE?
.......................................................................................................................................
3
Who
Should
Use
COFEE?
..........................................................................................................................
3
How
to
Use
COFEE
....................................................................................................................................
3
Tool
Generation
Phase
..........................................................................................................................
4
Data
Acquisition
Phase
.........................................................................................................................
4
Report
Generation
Phase
......................................................................................................................
5
Installation
....................................................................................................................................................
6
Prerequisites
.............................................................................................................................................
7
Investigator
Machine
............................................................................................................................
7
USB
Removable
Device
.........................................................................................................................
7
Target
Machine
.....................................................................................................................................
7
Installation
Steps
.......................................................................................................................................
8
Installation
Troubleshooting
...................................................................................................................
14
Operation
Instructions
for
Device
Generation
...........................................................................................
15
Program
Startup
......................................................................................................................................
16
GUI
Interface
...........................................................................................................................................
16
Format
Device
.........................................................................................................................................
17
Generating
a
COFEE
Thumb
Drive
..........................................................................................................
18
Tool
Generation
..................................................................................................................................
18
Case
Notes
..........................................................................................................................................
19
USB
Generation
Steps
.........................................................................................................................
19
Advanced
Operations
..............................................................................................................................
20
Output
USB
.........................................................................................................................................
20
More
Options
(Advanced)
...................................................................................................................
20
USB
Generation
Troubleshooting
...........................................................................................................
25
Format
Troubleshooting
.....................................................................................................................
25
iii
Generation
Troubleshooting
...............................................................................................................
26
Operation
Instructions
for
the
COFEE
USB
Device
.....................................................................................
27
Beginning
the
COFEE
Process
.................................................................................................................
28
With
Autorun
Enabled
........................................................................................................................
28
Without
Autorun
Enabled
...................................................................................................................
28
Removing
the
USB
Device
.......................................................................................................................
30
Generating
a
Report
of
the
Collected
Data
................................................................................................
31
Create
a
Report
from
the
Collected
Data
...............................................................................................
32
Interpretation
of
Reports
........................................................................................................................
34
Menu
Navigation
.................................................................................................................................
35
Report
Troubleshooting
..........................................................................................................................
38
Appendix
.....................................................................................................................................................
39
NW3C
–
Volatile
Data
Profile
..................................................................................................................
40
Programs
&
Arguments
.......................................................................................................................
40
NW3C
–
Incident
Response
Profile
.........................................................................................................
41
Programs
&
Arguments
.......................................................................................................................
41
COFEE
Version
Change
Log
.....................................................................................................................
43
This project was supported by Grant No. 2008-CE-CX-0001 awarded by the Bureau of Justice Assistance. TheBureau of Justice Assistance is a component of the Office of Justice Programs, which also includes the Bureau of Justice Statistics, the National Institute of Justice, the Office of Juvenile Justice and Delinquency Prevention, and theOffice for Victims of Crime. Points of view or opinions in this document are those of the author and do not representthe official position or policies of the United States Department of Justice.
of 00
Introduction for User Guide for COFEE v112
Microsoft COFEE User Guide v1.1.2
10,153 Reads
Info and Rating
| Category: | |
| Rating: | (1 Rating) |
| Upload Date: | 11/06/2009 |
| Copyright: | Attribution Non-commercial |
| Tags: |
Leave a Comment