ITHACA, N.Y., Nov. 8, 2010 — ATC-NY has just released two new versions of Mac Marshal™ to fight cyber crime. Mac Marshal 2.0 automates the forensics process for a cyber investigator. It scans a Macintosh disk, automatically detects and displays Macintosh and Windows operating systems and virtual machine images, then runs a number of analysis tools to extract Mac OS X-specific forensic evidence written by the OS and common applications.
Mac Marshal Forensic Edition runs on an investigator's Mac workstation to analyze a disk image.
Mac Marshal Field Edition runs on a Mac target machine from a USB drive. It extracts volatile system state data, including a snapshot of physical RAM. The Field Edition also analyzes disk-based data, with the same capabilities as the Forensic Edition.
Image:
http://www.ereleases.com/pic/MacMarshalFieldEdition.jpg
Highlights of the new features available in Mac Marshal 2.0 include:
- Streamlined analysis, including Spotlight searches, on E01-format disk images.
- New analysis tools including system configuration analysis and swap file / hibernation file acquisition. Investigators can now see, for instance, any prior Wi-Fi access points the computer was associated with and whether there is a Time Machine backup drive to be examined for evidence.
- New Live State and Physical Memory acquisition tools that let the user examine the volatile state of a live machine before seizing it. [Field Edition only]
- Integrated thumbnail browser for previewing large numbers of image files.
- Improved analysis of data from Apple's Safari Web browser, including graphical previews of pages from Safari 4 and 5.
- Analysis of information from iPhone/iPad/iPod devices and support for creating or extracting backups of those devices.
Mac Marshal continues to provide industry-leading analysis of Mac application and operating system usage, including the detection and extraction of virtual machine images and FileVault-encrypted user directories. Mac Marshal maintains a thorough audit trail and generates detailed reports in RTF, PDF and HTML formats.
For more information about Mac Marshal and ATC-NY's Mac Forensics Training, visit .
ATC-NY developed Mac Marshal in conjunction with the U.S. National Institute of Justice. Mac Marshal is being actively used by local, state, federal and international law enforcement officials to investigate cyber crimes. Investigators find Mac Marshal a superb tool for saving an investigator's time during the analysis process.
ABOUT ATC-NY
Located in Ithaca, NY, ATC-NY conducts advanced research and development in computer security and information assurance. It offers a broad suite of products to the forensic community, including P2P Marshal™, Mac Marshal™, and Router Marshal™. ATC-NY is a subsidiary of Architecture Technology Corporation (ATC), headquartered in Eden Prairie, MN. Founded in 1981, ATC specializes in software-intensive solutions for complex problems in information security, enterprise-scale network computing architectures, and network management. ATC's customers include firms in the private sector and government agencies such as the U.S. Department of Defense, the FAA, the Department of Homeland Security and the Department of Transportation.
Contact: Press Information
Paul O'Neill, Direct Channel
Voice: (508) 588-4448
Email
# # #