Mem Marshal™ Digital Forensic Software

ATC-NY's Mem Marshal™ is a user-friendly, automated memory analysis system that assists and automates computer forensic investigations of volatile memory (RAM) images. Mem Marshal enables computer forensic investigators to analyze and effectively make use of information contained in volatile memory. Memory analysis produces important, case-relevant data for investigators that cannot be obtained from disk analysis, such as running applications, open files, active network connections.

Mem Marshal enables investigators to focus and enhance time-consuming disk analysis, reducing investigation time, by using information acquired from memory images, which can be searched and analyzed quickly.

Mem Marshal follows forensic best practices and maintains a detailed log file of all activities it perform. It produces reports in RTF, PDF, and HTML formats.

Latest Releases

Mem Marshal™ 1.0.0 was released August 2012.


Follow us on  Follow Mem Marshal on Twitter Twitter, the fastest way to hear about product updates and scheduled training sessions!