EVERYTHING XIAOMI
Get listed

SUMURI PALADIN

SUMURI PALADIN is a Linux live environment for forensic imaging, triage, and recovery, supported by donations.

Place
#11 of 30
Score
6.4
SUMURI PALADIN's website

What SUMURI PALADIN is

SUMURI PALADIN is a Linux live environment for forensic imaging, triage, and recovery, supported by donations. PALADIN 9 LTS is based on Ubuntu 24.04 LTS and is configured to protect attached media from changes and prevent automatic mounting at startup. Its graphical Toolbox supports imaging, logical acquisitions, hashing, and device mounting, with read-only options and logging. The environment includes Autopsy, The Sleuth Kit, and other open-source forensic tools. PALADIN LTS supports image formats including E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK, and can mount and image over NFS or SMB networks. It also supports BitLocker-encrypted Windows partitions from Vista through Windows 10. Persistent Mode can retain reports and settings between sessions when configured in advance, but requires extra free space. PALADIN LTS is available for free, though corporate users must donate at least $25. PALADIN PRO costs $99, paid once and includes a preconfigured Samsung USB, LTS 64-bit and PALADIN 32-bit, and a one-year USB warranty.

Good

  • Read-only options and logging in the Toolbox
  • Includes Autopsy and The Sleuth Kit
  • Supports E01/Ex01, RAW, SMART, AFF, VHD, and VMDK
  • Can image over NFS or SMB networks
  • LTS is free; corporate users donate at least $25

Watch out

  • Persistent Mode needs extra free space
  • Some BIOS settings may need adjustment for Secure Boot
  • PRO costs $99, paid once

Who it suits

PALADIN is aimed at forensic investigators, including law enforcement, military, and corporate users. It suits Linux live-environment workflows for imaging, triage, and recovery.

Verdict

PALADIN provides a forensic-focused live Linux environment with safeguards, imaging tools, and support for several image formats. Choose between free LTS and the separately priced PRO USB package based on the listed hardware and licensing details.

Plans and prices

From SUMURI PALADIN's own pricing page, checked 2 Oct 2026.

All about pricing
PlanPriceWhat it gives you
PALADIN LTSFreeName your price; corporate users must donate at least $25; others may choose any amount, including nothing
PALADIN PRO$99, paid oncePreconfigured Samsung USB; includes PALADIN LTS 64-bit and PALADIN 32-bit; one-year USB warranty

The facts

Each one read from SUMURI PALADIN's own pages, with the date it was checked.

What it does

Boot compatibility
PALADIN 9 LTS supports Secure Boot on a wider range of systems, though some BIOS configurations may still need adjustment.checked 2 Oct 2026
Encryption support
PALADIN LTS supports BitLocker-encrypted Windows partitions from Vista through Windows 10.checked 2 Oct 2026
Forensic safeguards
PALADIN 9 LTS is built on Ubuntu 24.04 LTS and is modified to prevent changes to attached media and disable auto-mounting at boot.checked 2 Oct 2026
Hardware compatibility
PALADIN PRO includes 64-bit and 32-bit versions and is described as supporting NVMe and eMMC imaging, including on pre-T2 Intel MacBooks and HP Stream laptops.checked 2 Oct 2026
Image formats
PALADIN LTS supports forensic image formats including E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK.checked 2 Oct 2026
Included software
PALADIN includes Autopsy and The Sleuth Kit, alongside open-source forensic tools.checked 2 Oct 2026
Integrations
PALADIN 9 LTS integrates Arsenal Image Mounter Remote Agent for advanced disk-image mounting and live or remote analysis.checked 2 Oct 2026
Intended users
SUMURI describes PALADIN as used worldwide by law enforcement, military, and corporate investigators.checked 2 Oct 2026
Network imaging
PALADIN LTS can mount and image over NFS or SMB networks.checked 2 Oct 2026
Persistent mode
Persistent Mode can preserve reports, tool configurations, and other content between sessions when configured in advance, and requires extra free space.checked 2 Oct 2026
Purpose
PALADIN is a donation-supported, live Linux environment for forensic imaging, triage, and recovery.checked 2 Oct 2026
Support
SUMURI provides a PALADIN Version 9 Quick Start Guide and directs users to its knowledge base and support portal for help.checked 2 Oct 2026
Toolbox
The PALADIN Toolbox provides a graphical interface for imaging, logical acquisitions, hashing, and device mounting, with read-only access options and logging.checked 2 Oct 2026

The company

Headquarters
Magnolia, Delaware, USAchecked 28 Sep 2026

Alternatives to SUMURI PALADIN

All alternatives
  1. 1Arkime logo

    Arkime

    Free planOpen sourceWebAPILinuxSelf-hosted
    7.3Free plan
    Visit
  2. 2

    Plaso

    Free planOpen sourceAPILinuxmacOSSelf-hosted
    7.3Free plan
    Visit
  3. 3

    CAINE

    Free planOpen sourceLinuxSelf-hostedWindows
    7.1Free plan
    Visit
  4. 4Paraben E3 Forensic Platform logo

    Paraben E3 Forensic Platform

    AndroidiOSLinuxmacOS
    7.1From $699 a year
    Visit
  5. 5OSForensics logo

    OSForensics

    Free planAndroidSelf-hostedWindows
    7.0From $945 a year
    Visit
  6. 6NetworkMiner logo

    NetworkMiner

    Free planLinuxmacOSWindows
    6.9$1,300 one-time
    Visit