Mac Marshal™ automates the analysis of Mac OS X file system images.  It scans a Macintosh disk image, automatically detects and displays Macintosh and Windows operating systems and virtual machine images, and provides the investigator with analysis tools to automate the extraction of Mac OS X-specific forensic evidence.

Highlights of the features available in Release 1.0 of Mac Marshal are:

• Analyzes Mac OS X and dual-boot disk and partition images in multiple formats
• Analyzes configuration and log files from OS X applications, such as Apple Mail, Safari, iChat, Quick Time Player, and Address Book
• Automatically gathers comprehensive machine usage information
• Automatically detects and provides analysis of FileVault-encrypted user directories
• Automatically detects VMware, VirtualBox and Parallels virtual machines
• Lists detailed information about every iPod and iPhone that has been connected to the machine
• Provides rapid searching of Spotlight file metadata
• Supports dd, EnCase, FTK, AFF, and Apple disk images
• Maintains a detailed audit trail and generates detailed reports in HTML, PDF, RTF and tab-separated value formats

Learn more

The OnLine Digital Forensic Suite™ (OnLineDFS for short) is a software product for performing forensic-quality investigations of live computers in networked environments. We built OnLineDFS for IT security professionals, service providers and law enforcement professionals who need to conduct investigations of live computers for:

• incident response;
• compliance monitoring;
• e-discovery;
• criminal investigations.

The OnLineDFS architecture does not use pre-installed agents on target systems. Thus, OnLineDFS is very simple and inexpensive to deploy, maintain and use, offering the best price/value in the industry.

OnLineDFS is a feature-rich tool which enables an investigator to capture and analyze volatile data (including the memory, running processes, open ports, process/port associations, and much more), as well as the full array of persistent data required for a forensic analysis. Because OnLineDFS was designed for conducting investigations over a network, it enables the investigation of target systems which are geographically remote as well as close-at-hand.

Learn more | Training

P2P Marshal™ is a new computer forensic tool which automatically detects, extracts and analyzes P2P evidence on hard drive images. P2P Marshal provides forensic investigators with a powerful new investigative product that automates the tedious, time consuming process of identifying P2P usage on computers under investigation.

P2P Marshal automatically detects a roster of the most commonly-used P2P client programs and presents per-user information on those clients, including shared files, downloaded files, peer servers, and configuration and log information. P2P Marshal performs these tasks in a forensically valid way and presents the results in an easily readable form on-screen and in a format that can easily be incorporated into a report.

P2P Marshal follows forensic best practices and maintains a detailed log file of all activities it performs. It has extensive search capabilities, produces reports in RTF, PDF and HTML formats, and runs on Windows XP and Vista platforms.

Learn more | Training

Press Releases

Patent Issued on OnLine Digital Forensic Suite Technology
- Press Release 3/2/09

Online Digital Forensic Suite (Online DFS) from Cyber Security Technologies named finalist in 2009 SC Awards program for “Best Computer Forensics Solution”
- Press Release 12/7/08

Cyber Security Technologies Announces New Forensic Software Product for Investigation of Mac OS X Systems
- Press Release 2/26/09

Cyber Security Technologies to Offer Peer-to-Peer Computer Forensics Training at Techno Security 2009 Conference
- Press Release 1/2/09

Cyber Security Technologies announces worldwide software reseller program
- Press Release 12/15/08

Reseller News

WetStone & Cyber Security Technologies Introduce Live Investigation Suite
- Reseller News 1/26/09