P2P Marshal Continuation

Tools used to address peer-to-peer network usage were identified as a need by state and local law enforcement by the NIJ Electronic Crime Technology Work Group in 2006. P2P Marshal discovers peer-to-peer (file sharing) programs that are installed on a target computer and then, for each discovered client, presents information, such as downloaded files, shared files, and peer servers that were contacted. Previously, analyzing P2P usage on a target computer was a tedious, manually intensive process.

This project attempts to address the BJS 2002 forensic backlog in the area of computer crime. P2P Marshal automates this analysis process, thereby reducing investigation costs and helping investigators meet their case deadlines. nca/ncf