Live Marshal by ATC-NY

ATC-NY’s Live Marshal™ is a user-configurable software tool to aid first responders in rapid forensic examinations. Live Marshal enables a responder to rapidly acquire data from one or more systems over an enterprise network. Live Marshal is user-configurable, enabling responders to incorporate their own, trusted command-line tools.

Product Features

• Runs from a laptop running a Windows or Linux operating system
• Is user configurable, responders can incorporate their own validated trusted command-line tools
• Does not require servlet installation
• Rapidly acquires target data from target host(s) on an enterprise network from a Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 systems
• Offers batch processing, acquiring target data on more than one machine at the same time
• Produces easily readable reports
• Offers encryption to secure data transmission going to and from the Live Marshal platform
• Offers data compression for output results
• Produces MD5 and SHA1 hash values to validate the integrity of acquired data
• Follows forensic best practices and maintains a detailed log file of all activities it performs, including all communications with the target device

Additional Information

For additional information on Live Marshal™, including screenshots and support information please visit the Live Marshal website.

Obtaining Live Marshal™ for U.S. Law Enforcement

If you are a member of U.S. Law Enforcement, you may use the link at the bottom of this page to request a free copy of Live Marshal™.