Comments on: More COFEE Please, on Second Thought…

By: Avec ou sans caféine ? « Criminalités numériques

Avec ou sans caféine ? « Criminalités numériques — Sat, 19 Dec 2009 13:19:32 +0000

[...] de fonctions non documentées de Windows. Dès que COFEE a été diffusé sur Internet, il a été décortiqué et critiqué. C’est d’ailleurs intéressant de voir combien certaines critiques sont [...]

By: Praetorian Prefect | Reactivating DECAF in Two Minutes

Praetorian Prefect | Reactivating DECAF in Two Minutes — Sat, 19 Dec 2009 02:51:39 +0000

[...] Regular or Decaf? Tool launched to combat COFEE [...]

By: Praetorian Prefect | Forensics: Beverages Aside, A Look at Incident Response Tools

Thu, 17 Dec 2009 01:02:02 +0000

[...] Online Forensic Evidence Extractor) was leaked on torrents for download. The news coverage was much hype about nothing, as many free tools already out there exceed COFEE in features and functionality. However, that did [...]

By: Praetorian Prefect | Regular or Decaf? Tool launched to combat COFEE

Praetorian Prefect | Regular or Decaf? Tool launched to combat COFEE — Tue, 15 Dec 2009 01:21:38 +0000

[...] a month ago, there was much news about the release of COFEE into the torrent wild. I even gave my two cents about the much hyped forensics toolkit which is provided to law enforcement for the purposes of [...]

By: .: cipha.net » cofee user guide

.: cipha.net » cofee user guide — Wed, 18 Nov 2009 15:51:07 +0000

[...] [via] [...]

By: spenser

spenser — Wed, 18 Nov 2009 10:07:43 +0000

"crytographic stealthware"

care to elaborate?

By: r3df0x

r3df0x — Fri, 13 Nov 2009 04:20:11 +0000

some of there programs are that of Systernal.

By: Computer Guy

Computer Guy — Wed, 11 Nov 2009 20:25:39 +0000

What I’d like to know is if the software interacts at all with the cryptographic stealthware built into Windows.

By: Teilo

Teilo — Tue, 10 Nov 2009 16:28:37 +0000

In other words, it's just a bunch of stock C:\Windows\System32 and live.sysinternals.com command-line utilities, already freely available, run from a batch file, with their output piped to a log file.

OOOOOO! Scaaaaaary!

By: Teksquisite

Teksquisite — Tue, 10 Nov 2009 04:17:23 +0000

Thanks for the great info – keep it coming :)