Live Marshal™ Digital Forensic Software
ATC-NY's Live Marshal™ is a user-configurable software tool to aid first responders in rapid forensic examinations. Live Marshal enables a responder to rapidly acquire data from one or more systems over an enterprise network. Live Marshal is user-configurable, enabling responders to incorporate their own, trusted command-line tools.
Live Marshal follows forensic best practices and maintains a detailed log file of all activities it performs, including all communications with the target device. It produces easily readable reports by copying the acquired results to a text file for a rapid analysis. It runs from a laptop or other computer running a Windows or Linux operating system.
Live Marshal 1.0.3, released October 2012. The 1.0.3 release runs on Windows and newer Linux distributions.