SUMURI

06/16/2026

Check Steve’s latest article about why digital forensics needs true open standards. He breaks down the history of forensic imaging and why our work must be fully validatable, not just based on trust.

Read it here: https://www.linkedin.com/pulse/you-cant-validate-really-forensic-format-steve-whalen-tjyue

A short history of forensic imaging — and why "open" has to mean something By Steve Whalen, SUMURI Digital forensics is a science. Like every science, it lives or dies by one principle: reproducibility.

06/16/2026

PALADIN 9.4.2 is now available.

This update solves two important issues for forensic examiners.

Problem: Some newer systems with NVIDIA RTX 5060 and RTX 5060 Ti graphics cards required special boot-time options to get PALADIN running properly.

Solution: PALADIN 9.4.2 adds the updated system and graphics support needed to boot properly on affected hardware without relying on those workarounds.

This helps make the boot process cleaner and easier when using PALADIN on newer forensic systems.

Problem: Forensic imaging needs to be transparent and defensible. Examiners need to know how an image was created, what settings were used, and whether the process can be tested and validated.

Solution: PALADIN 9.4.2 reintroduces AFF4 imaging support using open-source-based AFF4 code. This gives examiners more control over imaging settings and supports workflows that can be documented, tested, and validated.

PALADIN 9.4.2 includes:

• Improved support for RTX 5060 / RTX 5060 Ti systems
• Reduced need for boot-time workarounds
• Improved boot reliability
• Reintroduced AFF4 imaging
• Open-source-based AFF4 implementation
• Examiner-controlled imaging settings
• Support for testing and validation

PALADIN remains focused on reliable, explainable, and defensible forensic acquisition.

06/09/2026

Learn how to connect RECON ITR v26 to a network share (SMB)

In this quick tutorial, we walk through how to set up a network share and use it as a destination for your forensic imaging.

What you’ll learn:
✅ How to add a network server
✅ Required connection details
✅ Temporary vs saved connections
✅ Using a network drive for imaging

This is a simple but important step for working with shared storage in digital forensics.

Explore the latest updates:
https://sumuri.com/recon-itr-release-notes/

Follow for more RECON ITR tutorials.

06/02/2026

What Are Unified Logs and How Do You Collect Them on a Mac?

RECON ITR v26's built-in Log Collector pulls Unified Logs directly from a live Mac -- outputting searchable text files or a Log Archive compatible with the macOS Console app. No extra tools. No manual terminal commands.

New tutorial now live. We walk through:
✅ Selecting your output format
✅ Authenticating and starting the collection
✅ Locating the completed log output

RECON ITR v26 is available now at sumuri.com
https://sumuri.com/recon-itr-release-notes/

Follow for more RECON ITR tutorials.

05/26/2026

Check Steve’s latest article on why the lack of a fully published APFS specification creates hidden hurdles for digital forensics and why deep filesystem knowledge is still critical for complete investigations.

Read it here:

Here’s why that matters in macOS forensics APFS is the foundation of modern macOS systems, yet one of the most important facts about it is often overlooked. Apple has never published a complete, authoritative specification for APFS.

05/26/2026

What is the Global Timeline in RECON ITR?

Global Timeline is a cross-artifact chronological analysis feature in RECON ITR v26.

It pulls records from multiple triage plugins, images, audio, file system artifacts, print job logs, and more, into a single unified timeline filtered by date range and searchable by keyword.

Each record is labeled with its source plugin and timestamp context, so you know exactly what you are looking at and when it occurred.

New tutorial now live. We walk through:
✅ Loading a triage case and navigating to Global Timeline
✅ Selecting plugins and applying date filters
✅ Using keyword search to narrow results in real time
✅ Bookmarking filtered records for reporting

RECON ITR v26 is available now at sumuri.com
https://sumuri.com/recon-itr-release-notes/

Follow for more RECON ITR tutorials.

05/25/2026

This Memorial Day, we honor and remember those who made the ultimate sacrifice for our country.

Their courage, dedication, and selflessness will never be forgotten.

Today, we pause in gratitude for the freedom they helped protect.

05/19/2026

Just released: How to Update RECON ITR to the Latest Version

RECON ITR keeps your forensic investigations running at peak performance. In this new video, we show you exactly how to update RECON ITR on your Mac, from download to completion.

The update process is straightforward:
1.) Download the RECON ITR Updater
2.) Grant Full Disk Access
3.) Run the updater and confirm
4.) Complete the installation

This guide covers every step so you can get your forensic tools updated quickly and confidently.

For offline updates, reach out to [email protected].

05/15/2026

At SUMURI, we believe that true expertise requires a foundation of vendor-neutral proficiency. That’s why we lean on certification to ensure our key members are among the best in the field.

Huge congratulations to Henschen and Windham for successfully completing their intensive, two-week in-person training in Orlando!

This is their first step, but the journey doesn't end here. They are now moving into the next phase of their path toward becoming Certified Forensic Computer Examiners (CFCE). We are proud to support them as they sharpen their skills and uphold the highest standards in Digital Forensics.

Keep up the great work, gents!

05/15/2026

Join SUMURI at Techno Security East 2026!

Innovation doesn't take a vacation. Join us at the Myrtle Beach Sheraton & Convention Center from June 2-4 for three days of deep dives into digital forensics.

Visit the SUMURI team at Booth #314 to explore our latest software updates, including RECON ITR v26.0, and experience the unrivaled power of TALINO workstations. We will also be on-site to discuss our vendor-neutral Mac forensics training, essential for any modern lab.

We look forward to connecting with our partners and peers in South Carolina!