P2P Marshal by ATC-NY

P2P Marshal Forensic Edition™ is a software tool that runs on a forensic investigator’s workstation to detect and analyze peer-to-peer software use.

Product Features

• Analyzes peer-to-peer network usage on images of Windows XP, 2003, Vista, 2008, and Windows 7 systems (English and non-English, 32- and 64-bit)
• Provides full analysis for: Ares, BitTorrent, FrostWire, LimeWire, uTorrent, Azureus Vuze, and eMule
• Detects and shows default download locations for Kazaa
• Provides extensive search capabilities
• Built-in thumbnail and image viewer
• Produces customizable reports in CSV, HTML, PDF, and RTF formats
• Integrated online help
• Performs all actions in a forensically sound manner

Additional Information

For additional information on P2P Marshal Forensic Edition™, including screenshots, support information, and training information please visit the P2P Marshal website.

P2P Marshal Field Edition

In addition to P2P Marshal Forensic Edition™, ATC-NY has also created P2P Marshal Field Edition™.  P2P Marshal Field Edition™ is available on a USB drive only and requires no installation to run. The Field Edition provides the capability to run on a live computer in the field. With all of the features of the Forensic Edition, the Field Edition can also be used on an investigator’s workstation in the lab to examine disk images.

While P2P Marshal Field Edition™ is not available for free, ATC-NY does have a special arrangement with the National Institute of Justice, where U.S. Law Enforcement can purchase the P2P Marshal Field Edition for $149 per unit.  For more information on this please visit the P2P Marshal website.

Obtaining P2P Marshal Forensic Edition™ for U.S. Law Enforcement

Because of a special arrangement with the U.S. National Institute of Justice, P2P Marshal Forensic Edition™ is available free of charge to U.S. Law Enforcement.  If you are a member of U.S. Law Enforcement, you may use the link at the bottom of this page to request a free copy of P2P Marshal Forensic Edition™.