COFEE (Computer Online Forensic Evidence Extractor) is a system designed to collect digital evidence from suspects computers while they are running. The tool was developed by Microsoft to assist in computer crime investigations. The ability to grab a perfect copy of data from a PC without interfering with a computer is attractive to the computer crime authorities and it’s not surprising that the tool has leaked onto the web. READ: CoFEE allows computer crime investigators to grab dump of processes running on an active computer at the scene of an investigation.”]
Source: https://grahamcluley.com/microsofts-cofee-forensic-tool-leaks-web/