Router Marshal by ATC-NY

ATC-NY developed Router Marshal™ to automatically acquire digital forensic evidence from network devices such as routers and wireless access points. An investigator can use the Router Marshal software in the field to identify a network device, automatically acquire volatile forensic evidence from the device, and view and interpret this evidence.

Product Features

• Analyzes routers, wireless access points, and other network devices
• Connects over the network or through a serial connection
• Acquires evidence via HTTP, HTTPS, Telnet, and SSH
• Extracts and displays case-relevant data from acquired evidence
• Scripting capabilities enable users to add support for new devices
• Maintains an audit trail and generates detailed reports
• Included sample scripts support the following routers:
  • Linksys WRT54G/GC/GL/GS/G2, AG241, and WRT160N
  • Netgear RP114, WGR614, WNR1000, and WNR2000
  • D-Link TM-G5240 and WBR-2310
  • DD-WRT and Tomato firmware
  • Cisco IOS

Additional Information

For additional information on Router Marshal™, including screenshots and support information please visit the Router Marshal website.

Obtaining Router Marshal™ for U.S. Law Enforcement

Because of a special arrangement with the U.S. National Institute of Justice, Router Marshal™ is available free of charge to U.S. Law Enforcement.  If you are a member of U.S. Law Enforcement, you may use the link at the bottom of this page to request a free copy of Router Marshal™.