Home About Download Resources Training Certification Contact
P2P Marshal Screenshots
Click on the links below to view P2P Marshal in action.
Selecting a Target Disk to Analyze
P2P Marshal can analyze any mounted logical volume (e.g., C:, D:, ...) or subtree within a folder (e.g.,
C:\unzipped Windows Disk\).
Main Page Showing P2P Marshal
Each discovered P2P client has its own tab. Each tab allows the investigator to display information on individual
users as well as all users.
Searching for Downloaded Files
Investigators can search for files matching complex patterns, such as filename extension (e.g., .jpg) and file
size and MAC times.
Reviewing Saved Searches
Searches can be saved to be included in the report that P2P Marshal generates. A search description includes all of the
search terms and constraints that were specified.
Reviewing Saved Searches (the selected search has been renamed)
Saved searches can be renamed with a mnemonic name to make it easy to distinguish
among different searches.
