SUMURI RECON ITR MacOS Image Triage Report (rental version)

Sale price€150,00 EUR

Tax excluded. Shipping calculated at checkout

Your advantage : No customs duties and no import tax within the EU.

SUMURI knows that investigators don't necessarily need to buy the tool if they only want to investigate one Mac, but still want to handle each case with the utmost care. This problem is now solved!Investigators can now rent a full version of RECON ITR for EUR 150 (+shipping costs) per week and experience the full functionality of the tool when they receive all three drives of RECON ITR: a 500 GB Samsung T7 SSD with RECON ITR, which offers both live and bootable imaging, and a PALADIN PRO! At the end of the rental period, investigators have the option to purchase the tool, with the rental cost applied to the purchase price, or simply return the drives to the SUMURI office.


rental period: 1 week
In stock

RECON ITR combines Bootable and Live Imaging options in one. An indispensable tool for anyone who needs to secure and capture data from all Intel and Apple Silicon macOS computers.RECON ITR is suitable for both novice and advanced investigators. With limitless reporting options, you'll get answers in seconds.RECON's it forensic solutions are built natively on the macOS platform to natively support imaging and triaging a Mac. With RECON ITR, you don't have to wait for answers like you do with other solutions. RECON ITR performs triage and analysis using the same tool. With RECON ITR, you don't have to collect data with one tool and then buy another tool for analysis. You get the answers you need right away.Collect only the files that matter, including iOS, macOS, and Boot Camp artifacts, and create an image. RECON ITR is specifically designed to get the maximum amount of data in the shortest amount of time.RECON ITR now includes a free PALADIN PRO with every new purchase, covering all imaging and triaging needs on macOS, Windows and Linux.

Both Bootable and Live Imaging Solutions

Take the guesswork out of what tool to use for imaging Macs. RECON ITR includes both Bootable and Live Imaging solutions to image all Intel-based Macs, Apple Silicon Macs, and their filesystems.

RECON ITR combines both the functions of bootable and live imaging from RECON TRIAGE and RECON IMAGER PRO into an integrated solution that automatically identifies, displays, and can image FileVault, APFS, and Core Storage volumes and disks at a cost well below any other tool.

RECON ITR images all Intel-based Macs with or without T2 Security Chips and the newest Macs with Apple’s M1 Chip processor. No more waiting for other solutions to do what RECON ITR can do today.

Recon ITR includes three solutions to image and triage across macOS, Windows, and Linux. Now, including PALADIN PRO, RECON ITR gives you three chances to image and the capability to work on multiple cases all for the price of one.

The Only macOS Triage Solution to Provide Answers in Seconds

RECON ITR has hundreds of plugins to parse thousands of artifacts from macOS, iOS backups and Boot Camp built-in. RECON ITR performs analysis and triage within the same tool to give you answers in seconds of live running Macs or Macs connected in Target Disk Mode in a write-blocked environment.

Endless Reporting Options at your Fingertips to get the Answers you need Quickly

RECONITRautomatically finds important artifacts, parses the data and presents them to you in a unified format that can be refined to produce the perfect report.

macOS Volatile Data Collection

RECON ITR includes automatic collection of Volatile Data for important artifacts related to malware, hacking and user logins

Capture Mac RAM from both the live and bootable environments with RECON ITR’s RAM Imager.

Forensic images produced by RECON ITR can be processed easily in RECON LAB – SUMURI’s Flagship Full Forensic Suite which automates analysis of Mac, iOS, Windows and more!