Startup Stash is one of the world's largest online directory of tools and resources for startups
SUMURI's bootable Linux suite for forensic imaging, triage and recovery.
PALADIN is a bootable Linux forensic suite from SUMURI, used for imaging, triage and recovery. It is still maintained. The download is name your price, with a $25 minimum donation for corporate users, and a ready-made PALADIN PRO USB costs $99.
The current release is 9.4.2, part of PALADIN 9 LTS, built on Ubuntu 24.04 LTS with a Linux 6.17 based live kernel. The system is modified so it does not change attached media and does not auto-mount drives at boot. It bundles Autopsy, The Sleuth Kit, Volatility 3 and more than 30 categories of DFIR tools, plus SUMURI's own PALADIN Toolbox for imaging and hashing.
Bottom line: PALADIN is one of the easiest ways to get a write-protected forensic boot drive at low or no cost. Individuals and law enforcement can pay what they like. Companies should budget at least $25, or $99 for the PRO USB.
The OS is changed to prevent writes to attached media and to stop drives auto-mounting at boot.
A graphical app for imaging, logical acquisitions, hashing and mounting devices, included in PALADIN 9 LTS.
The Logical Imager supports BitLocker decryption, so you can collect files from encrypted drives.
Autopsy, The Sleuth Kit, Volatility 3 for memory analysis, and 30+ categories of curated tools. Persistent Mode keeps reports and settings between sessions.
| Plan | Price | What you get |
|---|---|---|
| PALADIN (download) | Name your price | Full live environment. Individuals, non-profits and law enforcement choose the amount. |
| PALADIN (corporate use) | $25 minimum | Same download. Corporate users must donate at least $25. |
| PALADIN PRO | $99 | Samsung Type-C USB with 64-bit and 32-bit versions, plus Bring Your Own ISO for adding your own tools. |
Prices in US dollars from sumuri.com. The download is funded by donations.