skip navigation


Register for Latest Research

Stay Informed
Register with NCJRS to receive NCJRS's biweekly e-newsletter JUSTINFO and additional periodic emails from NCJRS and the NCJRS federal sponsors that highlight the latest research published or sponsored by the Office of Justice Programs.

NCJRS Abstract

The document referenced below is part of the NCJRS Virtual Library collection. To conduct further searches of the collection, visit the Virtual Library. See the Obtain Documents page for direction on how to access resources online, via mail, through interlibrary loans, or in a local library.


NCJ Number: 228695 Find in a Library
Title: Tool Helps Automate, Expedite CyberCrime Probes
Corporate Author: National Law Enforcement and Corrections Technology Center (NLECTC)
United States of America
Date Published: 2009
Page Count: 2
Sponsoring Agency: National Institute of Justice (NIJ)
Washington, DC 20531
National Law Enforcement and Corrections Technology Center (NLECTC)
Gaithersburg, MD 20879
Grant Number: 2005-MU-CX-K077
Sale Source: National Law Enforcement and Corrections Technology Center (NLECTC)
700 N. Frederick Ave.
Bldg. 181, Room 1L30
Gaithersburg, MD 20879
United States of America
Document: PDF
Type: Report (Technical)
Format: News/Media
Language: English
Country: United States of America
Annotation: This paper describes the features of the P2P MarshalTM, a computer software that functions to reveal in minutes evidence of a suspect’s use of a computer for peer-to-peer (P2P) network sharing of child pornography, the theft of copyrighted music, or the theft of classified government information.
Abstract: Using this tool not only saves time for the investigator, thus helping to reduce backlogs, it can also prove links between individuals and assist agencies in expanding investigations. Developed by ATC-NY, a subsidiary of Architecture Technology Corporation, the P2P Marshal TM automatically detects the use of P2P client programs, extracts configuration and log information, and lists both uploaded and downloaded shared files. It has extensive search capabilities, produces reports in several formats and runs on Microsoft Window-based operating systems. P2P Marshal also provides a detailed log file of all activities it performs. In order to build a case, an investigator needs to identify how the suspect used the P2P tools, i.e., whether he was specifically searching for child pornography or downloaded a large block of pictures without knowing the illegal material was included. In order to prove intent, an investigator must understand how the P2P programs work, as each P2P program works differently. An investigator must research various P2P programs before searching for information. P2P Marshal automates this task as much as possible. Early in 2009, P2P Marshal surpassed the 1,000 mark for registered users while Version 1.0 was still available. Version 2.0, released in summer 2009, can be run from a USB drive and taken out into the field. This expanded capability makes Version 2.0 available to field investigators as well as probation and parole officers checking on a client’s compliance with probation/parole conditions.
Main Term(s): Police equipment
Index Term(s): Child Pornography; Computer crime investigative Training; Computer evidence; Computer related crime; Computer software; NIJ grant-related documents
Note: Reprinted from the Fall 2009 edition of TechBeat;downloaded November 5, 2009.
To cite this abstract, use the following link:

*A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's website is provided. Tell us how you use the NCJRS Library and Abstracts Database - send us your feedback.