P2P Marshal Continuation Funding

This project will enhance the P2P Marshal forensic tool by adding additional features to increase its functionality and usability. P2P Marshal is used to examine peer-to-peer (file sharing) programs on a computer. P2P Marshal was developed with NIJ funding and is made available free to law enforcement agencies.

ca/ncf

To obtain evidence from P2P file sharing clients efficiently, law enforcement investigators and forensic analysts require a fast, easy-to-use computer forensic analysis tool that acquires and analyzes this evidence. P2P Marshal fills this role, but should be enhanced to increase its usefulness to forensic analysts. To better meet the needs of law enforcement, P2P Marshal will address the following requirements: 1. Analyze individual evidence files, such as those extracted by third-party tools or available in partial disk images; 2. Provide data source information in reports, simplifying presentation in court; 3. Provide improved reporting capabilities; 4. Support modern P2P clients often seen in crime labs; and 5. Support new versions of existing P2P clients.
ca/ncf