P2P Marshal Field Edition analyses live systems and system images for peer-to-peer clients and network connections. It works on live systems that have Windows XP, 2003, Vista, Windows 7 (32- or 64-bit) and system images for Windows 2000, XP, 2003, Vista and Windows 7.
P2P Marshal comes on a USB flash drive, does not need to be installed and can be moved from system to system. It provides full analysis for Ares, BitTorrent, FrostWire, LimeWire, uTorrent and Azureus/Vuze. Along with discovering these programs it also finds and shows the default download locations for Kazaa.
We tested on a live system running Windows XP with good results, as it performed exactly as advertised. When scanning an image, it needs to be of a full system, as P2P Marshal requires a registry to find the programs. This is the program's only limitation: it cannot scan a disk without an operating system.
We found that navigating through the program was very easy and straightforward. With limited menus there is little room for misinterpretation. Since P2P Marshal is installed on a flash drive, investigators can work on the go, moving from computer to computer fast and efficiently. It only scans the registry so it is faster than scanning the entire hard drive.
Documentation is on the thumb drive and it gives clear instructions on how to use the product and easy to follow screenshots.
Cyber Security Technologies includes maintenance and support for the first year and then 20 per cent of the licence price per year starting in year two. Support on a 24/7 basis is available on request by email and there is a FAQ section on the website.
For a price of £1,665 P2P Marshal is good value for what it does. However, it is limited to a very specific set of functions. As it is pre-installed on a thumb drive its mobility is also an added benefit for moving from computer to computer, making it fast and mobile.