THE FUTURE OF MAC FORENSICS – EVEN FASTER
RECON for Mac OS X – PALADIN Edition is now available on an Samsung T3 250GB SSD USB 3.1 external micro-drive * for fast data transfer using it live in the field or back at the lab!
RECON for Mac OS X is pre-configured with PALADIN PRO which includes both the 32-bit and 64-bit versions of our PALADIN Forensic Suite on the drive so it can be used to boot most Intel Macs, PCs and servers for imaging. The Mac forensic images made with PALADIN can then be analyzed by RECON for Mac OS X to complete Mac examinations in minutes! The 250 GB Samsung T3 can be used to save output and reports from RECON.
RECON for Mac OS X creates advanced output and can produce thousands of reports. Simple configuration and fast results. Engineered by SUMURI, a world leader in Macintosh and iOS forensics.
RECON for Mac OS X is designed to complete cases in minutes, not days or weeks.
RECON for Mac OS X is a single distribution that works in the field on live systems and also back at the lab to allow analysis of all popular forensic image formats.
RECON for Mac OS X can collect information from live running systems, write-protected hard drives or forensic images.
- Preconfigured to find evidentiary artifacts quickly on Mac OS X filesystems (10.7 and above).
- Rapid release schedule for updates and new module development.
- Reporting formats – PDF, HTML, CSV and XML
- Advanced Timeline Analysis.
- Track and view a suspect’s location.
- Recover user and system passwords.
- Identify the origin of files.
- Automatic chat timeline construction for iMessages and Skype.
- Ability to customize and save templates.
- Built-in virtual mounting for DMG and Expert Witness formats such as .E01 and .Ex01.
- Advanced and in-module File Exporter.
- Custom Plugin development available.
- Identify and export Virtual Machines.
- Image RAM
- Volatile Data collection.
- Ability to run against Time Machine backups
- And we’re just getting started!
* Samsung 250 GB T3 USB drive has a 1 Year Warranty. Technical Support is included as long as the annual renewal is active.