- Home
- Digital Forensics Software
- SUMURI PALADIN
SUMURI PALADIN
Magnolia, Delaware, USA
What it is
SUMURI PALADIN is a donation-supported Linux live environment for forensic imaging, triage, and recovery. Its graphical Toolbox supports imaging, logical acquisitions, hashing, and device mounting, with read-only access options and logging. PALADIN includes Autopsy, The Sleuth Kit, and other open-source forensic tools. The LTS version works with image formats such as E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK, and can mount and image over NFS or SMB networks. It also supports BitLocker-encrypted Windows partitions from Vista through Windows 10. PALADIN 9 LTS is built on Ubuntu 24.04 LTS and is modified to prevent changes to attached media and disable auto-mounting at boot. It integrates Arsenal Image Mounter Remote Agent for image mounting and live or remote analysis. Persistent Mode can retain reports and configurations between sessions when configured in advance, but requires extra free space. PALADIN LTS is free, though corporate users must donate at least $25. PALADIN PRO costs $99, paid once and includes a preconfigured Samsung USB, 64-bit and 32-bit versions, and a one-year USB warranty.
For and against
For
- Toolbox supports imaging, hashing, and logical acquisitions
- Includes Autopsy and The Sleuth Kit
- Supports multiple forensic image formats
- Can image over NFS or SMB networks
- Modified to prevent changes to attached media
Against
- Persistent Mode requires extra free space
- Some BIOS configurations may need adjustment
- Corporate users must donate at least $25 for LTS
The verdict
PALADIN combines a live Linux environment with forensic tools and safeguards for imaging and recovery workflows. LTS is free with a required minimum corporate donation; PRO is a separate paid USB offering.
Who it suits
PALADIN suits forensic investigators working with disk images, local disks, logical files, and mobile or vehicle data. SUMURI describes it as used by law enforcement, military, and corporate investigators.
Plans and prices
PALADIN LTS
Name your price; corporate users must donate at least $25; others may choose any amount, including nothing
Read 2 Oct 2026 · sumuri.com
PALADIN PRO
Preconfigured Samsung USB; includes PALADIN LTS 64-bit and PALADIN 32-bit; one-year USB warranty
Read 2 Oct 2026 · sumuri.com
On the record
- Boot compatibility
- PALADIN 9 LTS supports Secure Boot on a wider range of systems, though some BIOS configurations may still need adjustment.sumuri.com · read 2 Oct 2026
- Encryption support
- PALADIN LTS supports BitLocker-encrypted Windows partitions from Vista through Windows 10.sumuri.com · read 2 Oct 2026
- Forensic safeguards
- PALADIN 9 LTS is built on Ubuntu 24.04 LTS and is modified to prevent changes to attached media and disable auto-mounting at boot.sumuri.com · read 2 Oct 2026
- Hardware compatibility
- PALADIN PRO includes 64-bit and 32-bit versions and is described as supporting NVMe and eMMC imaging, including on pre-T2 Intel MacBooks and HP Stream laptops.sumuri.com · read 2 Oct 2026
- Image formats
- PALADIN LTS supports forensic image formats including E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK.sumuri.com · read 2 Oct 2026
- Included software
- PALADIN includes Autopsy and The Sleuth Kit, alongside open-source forensic tools.sumuri.com · read 2 Oct 2026
- Integrations
- PALADIN 9 LTS integrates Arsenal Image Mounter Remote Agent for advanced disk-image mounting and live or remote analysis.sumuri.com · read 2 Oct 2026
- Intended users
- SUMURI describes PALADIN as used worldwide by law enforcement, military, and corporate investigators.sumuri.com · read 2 Oct 2026
- Network imaging
- PALADIN LTS can mount and image over NFS or SMB networks.sumuri.com · read 2 Oct 2026
- Persistent mode
- Persistent Mode can preserve reports, tool configurations, and other content between sessions when configured in advance, and requires extra free space.sumuri.com · read 2 Oct 2026
- Purpose
- PALADIN is a donation-supported, live Linux environment for forensic imaging, triage, and recovery.sumuri.com · read 2 Oct 2026
- Support
- SUMURI provides a PALADIN Version 9 Quick Start Guide and directs users to its knowledge base and support portal for help.sumuri.com · read 2 Oct 2026
- Toolbox
- The PALADIN Toolbox provides a graphical interface for imaging, logical acquisitions, hashing, and device mounting, with read-only access options and logging.sumuri.com · read 2 Oct 2026
