ATC-NY's Live Marshal™ is a user-configurable software tool to aid first responders in rapid forensic examinations. Live Marshal enables a responder to rapidly acquire data from one or more systems over an enterprise network. Live Marshal is user-configurable, enabling responders to incorporate their own, trusted command-line tools.

Live Marshal follows forensic best practices and maintains a detailed log file of all activities it performs, including all communications with the target device. It produces easily readable reports by copying the acquired results to a text file for a rapid analysis. It runs from a laptop or other computer running a Windows or Linux operating system.

Latest Release

Live Marshal 1.0.1, released August 2011.  Live Marshal now runs on Linux and Windows!

Please contact us if you are interested in a version of Live Marshal that runs from a Nokia N810 Internet Tablet.

Approved for Public Release; Distribution Unlimited: 88ABW-2010-6552 dated 15 December 2010.