SUMURI PALADIN

What SUMURI PALADIN is

SUMURI PALADIN is a donation-supported Linux live environment for forensic imaging, triage, and recovery. Its graphical Toolbox supports imaging, logical acquisitions, hashing, and device mounting, with read-only access options and logging. PALADIN includes Autopsy, The Sleuth Kit, and other open-source forensic tools. PALADIN 9 LTS is built on Ubuntu 24.04 LTS and modified to prevent changes to attached media and disable auto-mounting at boot.

PALADIN LTS supports forensic image formats such as E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK, and can mount and image over NFS or SMB networks. It supports BitLocker-encrypted Windows partitions from Vista through Windows 10 and integrates Arsenal Image Mounter Remote Agent for advanced disk-image mounting and live or remote analysis. Persistent Mode can retain reports and configurations between sessions when configured in advance, but requires extra free space. PALADIN LTS is available for free, though corporate users must donate at least $25. PALADIN PRO costs $99, paid once and includes a preconfigured Samsung USB, LTS 64-bit and PALADIN 32-bit, and a one-year USB warranty.

Who it suits

It is intended for forensic practitioners, including law enforcement, military, and corporate investigators. The listed tools cover imaging, acquisition, hashing, and device mounting in a live Linux environment.

Limits

PALADIN LTS is free under a name-your-price model; corporate users must donate at least $25, while others may contribute any amount or nothing. PALADIN PRO costs $99, paid once and includes a one-year USB warranty.

Getting started

1. Visit the SUMURI PALADIN website.
2. Choose PALADIN LTS or PALADIN PRO.
3. For PALADIN PRO, use the preconfigured Samsung USB, which includes LTS 64-bit and PALADIN 32-bit.
4. Boot a supported Linux live environment on compatible PC hardware.
5. Consult the PALADIN Version 9 Quick Start Guide or SUMURI's knowledge base and support portal for help.

Verdict

PALADIN combines a live Linux environment with forensic imaging and acquisition tools, and PALADIN LTS is available with optional donations for non-corporate users. Persistent Mode requires advance configuration and extra space; Secure Boot may also depend on BIOS settings.