ATC-NY's Live Marshal™ is a user-configurable software tool to aid first responders in rapid forensic examinations. Live Marshal enables a responder to rapidly acquire data from one or more systems over an enterprise network. Live Marshal is user-configurable, enabling responders to incorporate their own, trusted command-line tools.

Live Marshal follows forensic best practices and maintains a detailed log file of all activities it performs, including all communications with the target device. It produces easily readable reports by copying the acquired results to a text file for a rapid analysis. It runs from a laptop or other computer running a Windows or Linux operating system.

Latest Release

Live Marshal 1.0.3, released October 2012.  The 1.0.3 release runs on Windows and newer Linux distributions.

Please contact us if you are interested in a version of Live Marshal that runs from a Nokia N810 Internet Tablet.

Approved for Public Release; Distribution Unlimited: 88ABW-2010-6552 dated 15 December 2010.