This awardee has received supplemental funding. This award detail page includes information about both the original award and supplemental awards.
Description of original award (Fiscal Year 2009, $199,918)
This Project will further enhance P2P Marshal, a tool that will effectively conduct the forensic analysis of seized computers for the purpose of determining the criminal use of Peer-To-Peer (P2P) clients, by adding more features that have been suggested by law enforcement: improvements to the user interface, support for more P2P clients, improvements to report customization, and thumbnail image previewing. These enhancements will increase P2P Marshal's functionality and usability.
This project will enhance the P2P Marshal forensic tool by adding additional features to increase its functionality and usability. P2P Marshal is used to examine peer-to-peer (file sharing) programs on a computer. P2P Marshal was developed with NIJ funding and is made available free to law enforcement agencies.
To obtain evidence from P2P file sharing clients efficiently, law enforcement investigators and forensic analysts require a fast, easy-to-use computer forensic analysis tool that acquires and analyzes this evidence. P2P Marshal fills this role, but should be enhanced to increase its usefulness to forensic analysts. To better meet the needs of law enforcement, P2P Marshal will address the following requirements: 1. Analyze individual evidence files, such as those extracted by third-party tools or available in partial disk images; 2. Provide data source information in reports, simplifying presentation in court; 3. Provide improved reporting capabilities; 4. Support modern P2P clients often seen in crime labs; and 5. Support new versions of existing P2P clients.