P2P Marshal™ detects and analyzes the use of peer-to-peer software on target systems.

Forensic Edition 3.1.0™

P2P Marshal Forensic Edition™ runs on an investigator's workstation to analyze a disk image. It identifies what P2P clients are present on the disk and shows all of the files that have been shared (uploaded or downloaded). Get the Forensic Edition here!

Field Edition 3.1.0™

P2P Marshal Field Edition™ runs on a Windows target machine from a USB drive. It can conduct live investigations as well as analyze mounted disk images. Get the Field Edition here!