High Quality Content by WIKIPEDIA articles! Computer Online Forensic Evidence Extractor is a modified USB flash drive for investigators for quick extraction of forensic data from Windows computers that are suspected to contain evidence of criminal activity. It allows investigators to search through data onsite as an automated forensic tool. The device, developed by Microsoft, is activated by being plugged into a USB port, and purportedly contains 150 commands that can dramatically cut the time it takes to gather digital evidence. These commands offer such functions as the ability to decrypt passwords, search a computer's Internet activity, and analyze the data stored on a computer including data stored in volatile memory, which could be lost if the computer were shut down for transport to a lab.
