Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
P. 1
User Guide for COFEE v112

User Guide for COFEE v112

Ratings:

5.0

(1)
|Views: 6,326 |Likes:
Published by DrWeirdOne
Microsoft COFEE User Guide v1.1.2
Microsoft COFEE User Guide v1.1.2

More info:

Published by: DrWeirdOne on Nov 06, 2009
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

11/09/2012

pdf

text

original

 
User
 
Guide
 
for
 
COFEE
 
v1.1.2
 
Release
 
Date:
 
September
 
2009
 
Copyright
 
Reserved
 
 
ii
 
Table
 
of 
 
Contents
 
Introduction
 
..................................................................................................................................................
 
1
 
What
 
is
 
COFEE?
 
.........................................................................................................................................
 
2
 
Digital
 
Forensics
 
Attributes
 
and
 
Principles
 
...........................................................................................
 
2
 
Volatile
 
Information
 
Collected
 
..............................................................................................................
 
2
 
Why
 
Use
 
COFEE?
 
.......................................................................................................................................
 
3
 
Who
 
Should
 
Use
 
COFEE?
 
..........................................................................................................................
 
3
 
How
 
to
 
Use
 
COFEE
 
....................................................................................................................................
 
3
 
Tool
 
Generation
 
Phase
 
..........................................................................................................................
 
4
 
Data
 
Acquisition
 
Phase
 
.........................................................................................................................
 
4
 
Report
 
Generation
 
Phase
 
......................................................................................................................
 
5
 
Installation
 
....................................................................................................................................................
 
6
 
Prerequisites
 
.............................................................................................................................................
 
7
 
Investigator
 
Machine
 
............................................................................................................................
 
7
 
USB
 
Removable
 
Device
 
.........................................................................................................................
 
7
 
Target
 
Machine
 
.....................................................................................................................................
 
7
 
Installation
 
Steps
 
.......................................................................................................................................
 
8
 
Installation
 
Troubleshooting
 
...................................................................................................................
 
14
 
Operation
 
Instructions
 
for
 
Device
 
Generation
 
...........................................................................................
 
15
 
Program
 
Startup
 
......................................................................................................................................
 
16
 
GUI
 
Interface
 
...........................................................................................................................................
 
16
 
Format
 
Device
 
.........................................................................................................................................
 
17
 
Generating
 
a
 
COFEE
 
Thumb
 
Drive
 
..........................................................................................................
 
18
 
Tool
 
Generation
 
..................................................................................................................................
 
18
 
Case
 
Notes
 
..........................................................................................................................................
 
19
 
USB
 
Generation
 
Steps
 
.........................................................................................................................
 
19
 
Advanced
 
Operations
 
..............................................................................................................................
 
20
 
Output
 
USB
 
.........................................................................................................................................
 
20
 
More
 
Options
 
(Advanced)
 
...................................................................................................................
 
20
 
USB
 
Generation
 
Troubleshooting
 
...........................................................................................................
 
25
 
Format
 
Troubleshooting
 
.....................................................................................................................
 
25
 
 
iii
 
Generation
 
Troubleshooting
 
...............................................................................................................
 
26
 
Operation
 
Instructions
 
for
 
the
 
COFEE
 
USB
 
Device
 
.....................................................................................
 
27
 
Beginning
 
the
 
COFEE
 
Process
 
.................................................................................................................
 
28
 
With
 
Autorun
 
Enabled
 
........................................................................................................................
 
28
 
Without
 
Autorun
 
Enabled
 
...................................................................................................................
 
28
 
Removing
 
the
 
USB
 
Device
 
.......................................................................................................................
 
30
 
Generating
 
a
 
Report
 
of 
 
the
 
Collected
 
Data
 
................................................................................................
 
31
 
Create
 
a
 
Report
 
from
 
the
 
Collected
 
Data
 
...............................................................................................
 
32
 
Interpretation
 
of 
 
Reports
 
........................................................................................................................
 
34
 
Menu
 
Navigation
 
.................................................................................................................................
 
35
 
Report
 
Troubleshooting
 
..........................................................................................................................
 
38
 
Appendix
 
.....................................................................................................................................................
 
39
 
NW3C
 
 –
 
Volatile
 
Data
 
Profile
 
..................................................................................................................
 
40
 
Programs
 
&
 
Arguments
 
.......................................................................................................................
 
40
 
NW3C
 
 –
 
Incident
 
Response
 
Profile
 
.........................................................................................................
 
41
 
Programs
 
&
 
Arguments
 
.......................................................................................................................
 
41
 
COFEE
 
Version
 
Change
 
Log
 
.....................................................................................................................
 
43
 
This project was supported by Grant No. 2008-CE-CX-0001 awarded by the Bureau of Justice Assistance. TheBureau of Justice Assistance is a component of the Office of Justice Programs, which also includes the Bureau of Justice Statistics, the National Institute of Justice, the Office of Juvenile Justice and Delinquency Prevention, and theOffice for Victims of Crime. Points of view or opinions in this document are those of the author and do not representthe official position or policies of the United States Department of Justice.

Activity (15)

You've already reviewed this. Edit your review.
1 hundred reads
1 thousand reads
multicafe liked this
Robert Ireland liked this
Dolores Walker liked this
Mark Klap liked this
permaslave liked this
andmargar liked this
fousan liked this

You're Reading a Free Preview

Download
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->