SUMURI Logo

Back To Shop

RECON ITR

Price:

$1,295.00

RECON ITR Software Product

RECON ITR comes preinstalled on a Samsung T7 SSD with speeds up to 1,050 MB/s and USB 3.2 Gen 2 (10Gbps) connectivity, supporting fast imaging and triage workflows as well as high-speed data transfer in the field.

The tool supports imaging and triage of Intel T2 and Apple Silicon Macs. Built natively on the macOS platform, RECON ITR includes automated artifact parsing that allows investigators to quickly review collected data during acquisition.

Investigators can collect and process artifacts during imaging or triage workflows, helping them identify relevant information without waiting for additional lab analysis.

Note:

  • PALADIN PRO is included with all new orders of RECON ITR at no additional charge.
  • Designed to image Windows, Linux, and pre-T2 Intel Macs without requiring software reinstallation.
  • Includes over 150 open-source forensic tools.
READ MORE
$

PRODUCT DESCRIPTION

RECON ITR is a forensic imaging and triage solution designed specifically for macOS systems. Built natively on macOS, it supports acquisition and processing of modern Apple devices without relying on reverse-engineered methods or tools ported from other operating systems.

The platform allows investigators to collect system artifacts, review results during triage, and generate reports within the same workflow. Automated artifact parsing helps examiners quickly identify relevant system activity and evidence.

SUMURI designed RECON ITR to support investigators as Apple hardware and macOS evolve, providing a platform for imaging, artifact collection, and reporting across modern Mac systems.

RECON ITR Main Features Include:

  • Supports imaging and triage of Apple Silicon and Intel T2 Macs
  • macOS volatile data collection
  • Software write-blocking is built in at no additional charge
  • Support for APFS volumes and Time Machine snapshots
  • Logical imaging with artifact collection
  • Triage and processing of iOS backups
  • Reporting formats – PDF, HTML, CSV, and KML
  • Advanced timeline analysis
  • Identify the origin of files
  • Ability to customize and save plugin templates for specific case types
  • Advanced in-module file exporter
  • Identify and export virtual machines
  • Includes USB Type-C to C and USB Type-C to A cables
  • Delivered preinstalled on the Samsung T7 SSD
  • Includes a dedicated partition where case data and evidence may be stored
  • Mac forensic imaging and additional triage tools

RECON ITR includes PALADIN PRO at no additional charge to support imaging and triage of Windows, Linux, and older Mac systems.

PALADIN PRO

PALADIN, SUMURI’s bootable Linux distribution, was created to provide the forensic community with a collection of acquisition and analysis tools.

PALADIN PRO is delivered on a Samsung USB device and includes PALADIN LTS, and PALADIN 32 pre-installed. The device includes an adapter to support both USB Type-A and USB Type-C connections, allowing investigators to work with a wide range of hardware systems.

PALADIN includes more than 150 precompiled open-source forensic tools along with the PALADIN Toolbox. The toolbox provides functionality for imaging, hashing, image conversion, selective logical imaging, imaging of unallocated space, and automatic write blocking.

PALADIN has been widely used by forensic examiners around the world.

Related products

Scroll to Top