SUMURI - RECON ITR
- 3-in-1 field solution for Imaging, Triage, and Reporting.
- Built for Mac with full support for Apple Silicon and T2 chips.
- Live and Boot modes for rapid evidence identification within minutes.
UMURI - RECON ITR is a 3-in-1 Mac field solution integrating Imaging, Triage, and Reporting. Built to overcome Apple’s hardware security, it empowers investigators to identify key evidence on-site and accelerate decision-making.
Description
- 3-in-1 On-site Workflow
RECON ITR integrates Imaging, Triage, and Reporting into a single environment. Investigators can complete everything from acquisition to initial analysis on-site without switching tools, maximizing operational efficiency. - Deep Access to Encrypted Mac Data
RECON ITR enables stable extraction of protected APFS data from high-security Macs with Apple Silicon (M1–M4) or T2 chips without hardware disassembly. Under authorized conditions with valid credentials, it stands as one of the few forensic tools capable of navigating modern Apple encryption architectures. - Rapid Evidence Valuation within Minutes
Using the built-in triage engine, investigators can scan recent files, web history, and system logs in minutes to evaluate a device's evidentiary value on-site. This immediate insight helps determine the necessity of time-consuming full seizures, significantly reducing the workload for back-end laboratories. - Forensic Integrity & Standard Output:
Strict write-protection ensures original evidence remains pristine. It supports industry-standard E01 and DMG formats with automatic FileVault mounting, ensuring seamless data integration into back-end analysis software.