P2P Marshal - Forensic tool to detect and analyse peer to peer / file sharing usage

P2P Marshal is a computer forensic tool to analyze Peer-to-Peer (P2P) usage on file system images.  It automatically detects what P2P client programs are, or were, present, extracts configuration and log information, and shows the investigator the shared (uploaded and downloaded) files.

P2P Marshal follows forensic best practices and maintains a detailed log file of all activities it performs.  It is designed to be easily extensible to support new P2P clients and networks.  It has extensive search capabilities and produces reports in RTF, PDF, and HTML formats and runs on Windows-based operating systems.