PALADIN is a bootable forensic Linux
distribution based on Ubuntu and is
developed and provided as a courtesy by
SUMURI. The boot process has been
modified to assure that the internal or
external media of computers and devices
are not modified or mounted.
PALADIN is available as an ISO which can
be used to make a bootable DVD or USB.
Once booted, the user will find a host of
pre-compiled open-source forensic tools
that can be used to perform various tasks.
Boot Sumuri Paladin Live Session into Forensics Mode:
 |
| Boot Screen |
 |
| Paladin Desktop |
 |
| Forensics Apps |
Execute a forensic copy of USB disk:
 |
| Paladin Toolbox Imager |
Mount external USB Disk into Paladin:
After completed the imaging action, task logs tab will show generated forensic image MD5 and SHA1 hashes.
Later, you can set up search criteria to search your evidence in the mounted image.
More details, please check YouTube video about Paladin Installation and Basic Usage Video: