Home About Download/Purchase Resources Training Certification Contact
Mac Marshal™ Screenshots
Click on the links below to view Mac Marshal in action.
Mac OS X Application Analysis
Mac Marshal analyzes files written by the operating system and many common Mac OS X applications; in this screenshow, the investigator examines recently-opened applications and documents.
Partition Analysis
Shows detailed information for an HFS+ partition and offers instant access to Spotlight search and Spotlight Images search.
Selecting a Target Disk to Analyze
Mac Marshal can analyze attached disks or partitions directly, or can operate on dd, Guidance Software EnCase, AccessData FTK, and AFF format images.
Spotlight Images
Example Spotlight Images analysis, which shows all images on the target drive, including EXIF metadata such as camera make and model.
