SUMURI RECON ITR MacOS Image Triage Report

€1.783,00 EUR

Tax excluded. Shipping calculated at checkout

RECON ITR is now available on a Samsung T7 SSD with speeds up to 1,050 MB/s and USB 3.2 Gen 2 (10Gbps) for the fastest triage and data transfer! The T7's built-in security options uses AES 256-bit encryption to keep your forensic evaluations safe at all times.

RECON ITR combines the power of RECON IMAGER PRO and RECON TRIAGE into one product that covers all Intel and Apple Silicon Macs.

RECON ITR is the only tool built and developed on the macOS platform that gives you the answers you need in minutes or seconds with an automated analysis function. You no longer need to perform manual forensic evaluations in a lab. Get the answers you need when you need them on the spot, at a lower price than many other solutions.

RECON ITR Samsung T7 Storage: 1TB (+229.00€)

500GB 1TB (+229.00€) 2TB (+399.00€)

Quantity:

In stock

✆ Questions? Chat on WhatsApp now

Description

RECON ITR

RECON ITR is a unique solution that captures and forensically evaluates Macs like no other it forensic tool on the market. Built from the ground up with macOS, this marvel of forensic innovation harnesses the full power of the Mac.

RECON ITR does not require reverse engineering and is not ported from other operating systems, which means more information and more accurate results.

SUMURI designed RECON ITR with the customer in mind to ensure investigators have the most versatile tool available when Apple hardware or Mac operating system changes occur. RECON ITR achieves this and much more by including unique and revolutionary features while priced well below the competition.

The most important functions of RECON ITR are:

Support for creating forensic images and examining Apple Intel & Silicon Macs
macOS Volatile Data Collection
Integrated software write blocker at no additional cost
Support for T2 chipsets, APFS and local Time Machine snapshots (APFS snapshots)
Create logical image with automatic artifact collection
Rapid release schedule for updates and new module development
Examination and forensic processing of iOS backups
Report formats - PDF, HTML, CSV and XML
Advanced timeline analysis
Track and view a suspect's location
Recovery of user and system passwords
Identify the origin of files
Automatic creation of chat timelines for iMessage and Skype
Ability to customize and save templates
Extended and module-internal file explorer
Custom plugin development available
Identify and export virtual machines
It comes with USB Type-C-to-C and Type-C-to-A cables for added convenience
Built-in security options on the Samsung T7 use AES 256-bit encryption
Contains both a bootable drive and a live imaging drive with enough space for data collection
Forensic Mac imaging and much more!

RECON ITR includes PALADIN PRO at no extra charge to support imaging and forensic examination of macOS, Windows and Linux.

PALADIN PRO
PALADIN, SUMURI's bootable Linux distribution is designed to give back to the forensic community.

PALADIN PRO is a preconfigured USB stick with 64-bit and 32-bit versions of PALADIN and PALADIN EDGE on a new USB drive that now offers USB Type-A and C connectors! This eliminates the need to carry multiple disks and supports a wide range of hardware.

PALADIN includes over 150 precompiled open source tools and our PALADIN tools. The PALADIN ToolBox offers image creation, hashing, image conversion, selective logical imaging, unallocated space imaging and automatic writeblocker.

PALADIN is court-approved and used by thousands of IT forensics professionals around the world.

PALADIN PRO now includes CARBON preinstalled for investigators who wish to purchase a license!

CARBON
CARBON is SUMURI's premier virtualization tool with support for almost any Windows system or IT forensic image.

CARBON allows the investigator to view evidence, bypass Windows credentials with the push of a button, and boot into a forensically protected virtual environment.

Both Bootable and Live Imaging Solutions

Take the guesswork out of which tool to use for Mac imaging. RECON ITR includes both bootable and live imaging solutions to forensically backup all Intel-based Macs, Apple Silicon Macs to their file structures.

RECON ITR combines the bootable and live imaging features of RECON TRIAGE and RECON IMAGER PRO into one integrated solution that can automatically identify, view and back up FileVault, APFS and Core storage volumes and disks at a price far below other tools.

RECON ITR backs up all Intel-based Macs with or without a T2 security chip and the latest Macs with Apple's M1/M2 chip processor. Don't wait any longer for other solutions to do what RECON ITR can do today.

Recon ITR includes three solutions for image and triage on macOS, Windows and Linux. Together with PALADIN PRO, RECON ITR now gives you three options for image and the ability to work on multiple cases - all for the price of one.

The only macOS triage solution that delivers answers in seconds

RECON ITR has hundreds of plugins to analyze thousands of artifacts for macOS, iOS backups and Boot Camp. RECON ITR performs analysis and triage within the same tool to give you answers in seconds on live running Macs or on Mac's connected in Target Disk Mode in a write-blocked environment.

Infinite reporting options to quickly get the answers you need

RECON ITR automatically finds key artifacts, analyzes the data, and presents it to you in a consistent format that can be refined to create the perfect report.

macOS volatile data collection

RECON ITR automatically collects volatile data for key artifacts related to malware, hacking and user logins.

Capture Mac RAM in both live and bootable environments with RECON ITR's RAM imager.

Forensic images created by RECON ITR can be easily processed in RECON LAB - SUMURI's flagship full forensic suite that automates analysis of Mac, iOS, Windows and more!

Safe shipping

We will send your package safely and well packed to your address.

Fast customer service

Our customer service is happy to answer any questions you may have.

Secure Data Transmission

Your connection to our shop is transmitted encrypted using SSL/TLS.

Secure payment

We offer various payment options for businesses, government agencies, and professional users. Purchase on account is available for eligible business customers and public clients.