Skip to content

Sumuri llc

SUMURI, LLC is a company that develops advanced forensic investigation software and hardware. Stylized as "SUMURI", the company is based in Camden, Delaware, USA.

Free Tools

PALADIN

PALADIN is a completely free forensic examination tool kit, a modified "live" Linux distribution based on Ubuntu that simplifies various forensics tasks in a forensically sound manner via the PALADIN Toolbox. PALADIN is available in 64-bit and 32-bit versions. It includes over 100 forensic tools, and also includes Autopsy by Basis Technology.

Features

PALADIN features over 100 open source forensic tools, including:

  • Anti-virus tools
  • Carving tools
  • Database tools
  • Development tools
  • Encryption tools
  • File differential tools
  • File system tools
  • Forensic suite
  • Hardware analysis
  • Hashing tools
  • Hex editor
  • Imaging tools
  • Internet analysis tools
  • Memory analysis
  • Log analysis
  • Mail analysis
  • Messenger analysis
  • Metadata analysis
  • Mobile device forensics tools
  • Network analysis
  • Password discovery
  • Photo analysis
  • PLIST Analysis
  • Recycle bin analysis
  • Reporting tools
  • Social media analysis
  • Stenography tools
  • Thumbnail analysis
  • Timeline analysis
  • TSK
  • Virtual machines
  • Windows Registry tools

Remote Services Mode

Every version of PALADIN includes SUMURI Remote Service Mode which can be activated at boot. In Remote Services Mode, SUMURI experts can perform a variety of services remotely anywhere in the world.

Software

RECON IMAGER

RECON IMAGER is a forensic imaging software, for Mac OS, and is based on Mac OS X. It can image all Intel® based Apple computers, including the newest generation of MacBook Pro with Touch Bar. It has a simplified GUI to ensure that the digital footprint of the program is small to maintain maximum integrity of data stored in RAM.

Features

  • Interprets Apple FileVault, Fusion and Core Storage volumes and disks to make decrypted forensic images by entering the user's password or Recovery Key.
  • Image RAM without an admin password
  • Rolling update structure to stay current with newest Mac OS releases
  • Quintuple boot system.
  • Native Mac OS boot environment
  • RAM imager - admin password not required.
  • Controls write protection.
  • Fusion drive support.
  • Apple core storage support.
  • Includes all versions of the PALADIN Forensic Suite

RECON for Mac OS X

RECON for Mac OS X is a software tool that automates the forensic data gathering process on the Mac OS X operating system. It automates what an experienced examiner would need weeks to accomplish in minutes. It automatically finds important artifacts, parses the data and presents them to you in a unified format that can be refined to produce automated reports.

Features

RECON for Mac OS X includes all current versions of PALADIN, which comes with a full featured open source Forensic Suite, bootable forensic imager, a software write-blocker, and other advanced digital forensics features:

  • Software Write-Blocker, Imager and Full Forensic Suite included.
  • Advanced Timeline Analysis.
  • Process forensic images or live Macs.
  • Identify the origin of files.
  • Automatic chat timeline construction for Messages and Skype.
  • Complete a Mac exam in minutes, not weeks.
  • Image mounting supporting popular forensic image formats and Fusion drives.
  • Built-in Live Imaging.
  • Automatic identification of Spoliation artifacts.
  • Create customized reports - PDF, HTML, CSV and XML.
  • Image RAM, capture Volatile Data

CARBON

CARBON is a virtualized forensic analysis tool for the Windows operating system. It automatically virtualizes and bypasses Windows logons to give you instant access to the user's desktop. All virtualization is done in a manner which protects the data from changes or alterations.

Features

  • Write block internal and attached devices
  • Includes the PALADIN toolbox
  • Seven forensic image formats
  • Device cloning
  • Data carving
  • Custom search conditions

Hardware

TALINO Forensic Workstations

TALINO Forensic Workstations are high-end computer systems developed to run specialized forensic discovery processes.