Meet the SUMURI Training Team

Hey Everyone! I just wanted to send out an update on SUMURI Training. We have just expanded and have brought on four new instructors to teach our courses. We decided it was time to give Steve a hand in presenting our Best Practices in Mac Forensics and Advanced Practices in Mac Forensics since he has [...]

By |2022-06-27T14:49:36-04:00April 20th, 2022|Categories: Blog|Comments Off on Meet the SUMURI Training Team

Let SUMURI help you grow your DFIR business

Running a digital forensics consultant business, either full-time or as a side business, can be very rewarding, both professionally and financially. From personal experience, I know the frustrations that come with owning a digital forensics business, from marketing to trying to pin down that client who hasn’t paid their invoice. We find that we tend [...]

By |2022-06-27T15:04:08-04:00January 24th, 2022|Categories: Blog|Comments Off on Let SUMURI help you grow your DFIR business

New Booting Options for M1 Macs

Join John Day, Senior Manager of the software division, to hear about the exciting new features that are coming to RECON ITR. New versions of macOS have allowed for exciting new options for imaging. Learn all about how RECON ITR will be booting Apple Silicon Macs in future builds! Stay tuned for more information about [...]

By |2022-02-11T11:48:26-05:00December 16th, 2021|Categories: Blog|Comments Off on New Booting Options for M1 Macs

Utilizing RECON LAB to reveal data that other tools miss

MacOS is notoriously hard to work with when it comes to forensics. Things that are simple and routine for a Windows investigation become laborious and confusing in the Mac world. Introductions like APFS, Secure Enclave, and proprietary processors have made navigating Mac forensics with a Windows machine almost impossible. With a Windows-based tool, you may [...]

By |2021-10-20T16:19:04-04:00October 19th, 2021|Categories: Blog|Comments Off on Utilizing RECON LAB to reveal data that other tools miss


Some combinations are unbeatable. Peanut butter and jelly, macaroni and cheese, Hall and Oates, pairings like these create something totally unique. When it comes to Mac forensics, we have our own iconic duo, RECON ITR and RECON LAB. If you are doing macOS acquisitions with RECON ITR, that is only half the battle. RECON LAB [...]

By |2021-07-29T11:43:52-04:00July 28th, 2021|Categories: Blog|Comments Off on RECON ITR plus RECON LAB

How to Image an Apple Silicon Mac with RECON ITR Live

Apple has made significant changes to the Mac lineup when transitioning from Intel processors to their Apple M1 Chip (Apple Silicon). Since then, forensic examiners have been confused about how to image and process Macs with Apple’s new proprietary processor.  At SUMURI, we want to put that confusion at ease by informing all forensic examiners [...]

By |2021-11-12T10:42:31-05:00February 9th, 2021|Categories: Blog|Comments Off on How to Image an Apple Silicon Mac with RECON ITR Live


Obtaining the volatile data stored in RAM through the process of RAM imaging has always been an essential part of Digital Forensics. RAM imaging provides examiners a means of obtaining invaluable information to assist with investigations; for example: Passwords Open Files Running Application Network Connections Imaging RAM in the Mac environment has always been [...]

By |2020-08-05T10:19:38-04:00August 4th, 2020|Categories: Blog, RECON|Tags: , , , |0 Comments

Solutions to Software Update Error Message in RECON IMAGER

The error message “A software update is required to use this startup disk” could appear when using RECON IMAGER to boot a Macintosh computer with a T2 Security Chip. Apple has a support page regarding this error message explaining that it is most likely caused by the default Full Security option in Secure Boot. Before [...]

By |2020-07-30T12:49:19-04:00June 16th, 2020|Categories: Blog|0 Comments


Go to Top