Sumuri was founded by two former forensic investigators with the aim of meeting the needs of their colleagues with fast and reliable forensic hardware and software. Its products are expertly designed for forensic investigations. High quality and performance combined with state-of-the-art hardware and the latest software for the forensic world.
Recon Imager enables securing Apple computers, including Macs running APFS and the latest generation MacBook Pro with Touch Bar. The tool automatically identifies and interprets Apple FileVault encryption, Fusion and Core Storage volumes and drives.
Creating a forensic copy of macOS memory is normally only possible using the administrator password. Recon Imager's boot environment allows a memory dump without the need for a password.
Recon Lab merges the previous versions of Recon, combining macOS, iOS and Windows forensics into one tool. Besides automatically processing data, it is possible to dive deeper into the system.
Recon Lab supports Apple Extended Metadata and can display it in an organized manner using filters and sorting combinations. Apple Extended Metadata can reveal the source of a file, who sent it, how and when it was received, when it was viewed and more.
Timeline analysis allows you to easily and quickly understand the sequence of actions on the media under investigation. A wide range of capabilities is built in for examining and displaying hex, SQLite, PList, Exif and many others. Reports can be created or modified at any time.
