P2P Marshal™ Digital Forensics Software

P2P Marshal is a tool to analyze peer-to-peer (P2P) usage on file system images. It automatically detects what P2P client programs are, or were, present, extracts configuration and log information, and shows the investigator the shared (uploaded and downloaded) files.

P2P Marshal follows forensic best practices and maintains a detailed log file of all activities it performs. It has extensive search capabilities, produces reports in RTF, PDF, and HTML formats and runs on Windows-based operating systems. And we have designed P2P Marshal so that we can support new P2P clients and networks in a modular fashion.

Funding for the development of P2P Marshal was provided by the U.S. National Institute of Justice.