Difference between revisions of "P2PMarshal"

From ForensicsWiki
Jump to: navigation, search
m
m
Line 16: Line 16:
 
It currently supports LimeWire and several BitTorrent clients, Ares, and Hello, and detects the presence of KaZaA.
 
It currently supports LimeWire and several BitTorrent clients, Ares, and Hello, and detects the presence of KaZaA.
  
As of January 2008, the 1.0 will be available at no cost to law enforcement, with a commercial version available to non-law enforcement.
+
As of January 2008, the 1.0 will be available at no cost to US law enforcement, with a commercial version available to non-law enforcement.
  
 
=Authors=
 
=Authors=
P2P Marhsal was developed by ATC-NY through a National Institute of Justice (NIJ) grant.  The project was originally named File Marshal.  
+
P2P Marhsal was developed by ATC-NY through a US National Institute of Justice (NIJ) grant.  The project was originally named File Marshal.  
  
 
= External Links =  
 
= External Links =  

Revision as of 18:17, 15 November 2007

P2P Marshal
Maintainer: ATC-NY
OS: Windows
Genre: Template:File forensics
License: Commerical (free to law enforcement)
Website: p2pmarshal.com

P2P Marshal is a program that helps an investigator discover and analyze file sharing software on a disk.

P2P Marshal operates on a logically mounted drive (i.e., a restored image of a disk, mounted as D:, E:, etc.) or a subdirectory (e.g., unzipped or untarred archive). It is designed to run under Windows, though as a Java-based program, it should be able to run on other platforms.

When run, it first detects the presence of P2P client programs. Then, for each program detected, it presents various information, such as downloaded and shared files, peer servers, and log messages. For some clients, additional information may be displayed, such as host ID numbers, total runtime, and other parameters tracked by the client. P2P Marshal displays the information either on a per-user basis or for all users. It also provides an extensive search capability, produces customizable summary reports in PDF, HTML, and RTF formats, and maintains an audit log of all actions performed by the investigator.

It currently supports LimeWire and several BitTorrent clients, Ares, and Hello, and detects the presence of KaZaA.

As of January 2008, the 1.0 will be available at no cost to US law enforcement, with a commercial version available to non-law enforcement.

Authors

P2P Marhsal was developed by ATC-NY through a US National Institute of Justice (NIJ) grant. The project was originally named File Marshal.

External Links