Microsoft has announced plans to give away free versions of its COFEE (Computer Online Forensic Evidence Extractor) utility to help law enforcement agencies in cyber-crime investigations. The utility uses digital forensic technologies to help investigators gather evidence of live computer activity at the scene of a crime, regardless of technical expertise. Law enforcement agents with less than 10 minutes training can capture live evidence of illegal activity by inserting a USB device into a computer. The evidence is then preserved for analysis, protecting it from being destroyed when the computer is turned off for moving.
Source: https://threatpost.com/free-cofee-helps-law-enforcement-forensics-101909/72343/