DECAF, which stands for Detect and Eliminate Computer Assisted Forensics, is a tool created by two developers to counter Microsoft's COFEE (Computer Online Forensic Evidence Extractor). COFEE is used by law enforcement to access password-protected or encrypted data on Windows systems. DECAF was designed to detect and block COFEE's operations, offering a form of protection for users concerned about forensic data extraction. The tool gained attention in 2009, but its creators later disabled all copies, claiming the project was a stunt. Discussions on WindowsForum.com cover DECAF's purpose, its effectiveness against COFEE, and the controversy surrounding its sudden discontinuation.
-
http://arstechnica.com/microsoft/news/2009/12/protect-yourself-from-cofee-with-some-decaf-1.ars
Two developers have created "Detect and Eliminate Computer Assisted Forensics" (DECAF). The tool tries to stop Microsoft's Computer Online Forensic Evidence Extractor (COFEE), which helps law...
-
http://arstechnica.com/microsoft/news/2009/12/-every-copy-of-decaf.ars
Update: 12/19/2009
With all the recent buzz about DECAF lately, there have been many requests for the visibility of DECAF source code. These have been from the early days of its release to the current "stunt" news. My...