P2P Marshall Field Edition analyzes live systems and system images for peer-to-peer clients and peer-to-peer network connections. P2P Marshall works on live systems that have Windows XP, 2003, Vista, Window 7 (32-bit or 64-bit) and system images for Windows 2000, XP, 2003, Vista, and Windows 7.
P2P Marshall comes on a USB flash drive, does not need to be installed, and can be moved from system to system. It provides full analysis for Ares, BitTorrent, FrostWire, LimeWire, uTorrent and Azereus Vuze. Along with discovering these programs, it also finds and shows the default download locations for Kazaa.
We tested P2P Marshall on a live system running Windows XP with good results, performing exactly as advertised. When scanning an image, the image needs to be of a full system as P2P Marshall requires a registry to find the programs. This is the tool's only limitation: It cannot scan a disk without an operating system.
We found that navigating through the program was very easy and straightforward. With limited menus there is little room for misinterpretation. Since P2P Marshall is installed on a flash drive, investigators can work on the go, moving from computer to computer fast and efficiently. Because it scans the registry only, it is faster than scanning the entire hard drive.
Documentation is on the thumb drive and it gives clear instructions on how to use the tool. It also gives easy-to-follow screen shots. The documentation also goes over known issues.
Cyber Security Technologies includes maintenance and support for the first year and then 20 percent of the license price per year starting in year two. There is also 24/7 support on request by email, and an FAQ on the website.
For a price of $2,495, P2P Marshall is a good value for what it does. However, for U.S. law enforcement agencies, it is an even better value at $149.
Overall, P2P Marshall excels in what it does. However, what it does is limited to a very specific set of functions. As it is pre-installed on a thumb drive, its mobility is also an added benefit for moving from computer to computer, making it fast and mobile.