Meet the industry-leading bootable solution for digital forensics.
PALADIN EDGE (64-Bit) is a complete, Ubuntu-based "live" distribution designed to simplify and accelerate every stage of your investigation—from triage to imaging—in a perfectly forensically sound environment. Powered by the re-engineered
PALADIN Toolbox, it’s the trusted, lightweight suite built to handle 64-bit systems and the most demanding data acquisition tasks. It’s the professional tool designed to make you a Forensic Rockstar.
Get PALADIN EDGE 8.01 (64-Bit) Today
PALADIN EDGE is available
completely FREE to the digital forensics community. We are committed to keeping this powerful tool accessible to all. If PALADIN is a critical part of your toolkit,
please consider making a donation to support its continued development and ensure future updates.
- Version: 8.01
- Download Size: 2.00 GB
- MD5:
a1ba416e2f389a9148139660e41de985 - SHA1:
34397f8bef0082400de8c7c2a82bf16db1f7280e
Please Note: To download PALADIN EDGE, you must create a SUMURI account and agree to the Terms and Conditions. This allows us to contact you with important news, product updates, and event information. You can opt-out at any time.
Your All-in-One Forensic Toolbox
The heart of PALADIN EDGE is the completely recoded and streamlined PALADIN Toolbox. It provides a simple, powerful interface for all critical forensic tasks.
What's New in Version 8.01: This latest release features an
updated Linux kernel, providing robust support for the newest hardware and ensuring maximum compatibility.
Key Features
Forensic Imaging & Cloning - Universal Format Support: Create forensic images in all major formats, including Expert Witness (
.E01, .Ex01), Apple Disk Image (.dmg), Raw (.dd), SMART, AFF, VHD, and VMDK. - High-Speed Efficiency: Image or clone two devices simultaneously, cutting your acquisition time in half.
- Network Imaging: Acquire data from remote devices across a network (SAMBA and NFS).
- Image Converter: Easily convert between forensic image formats.
Triage & Data Carving - Targeted Acquisition: Save valuable time by imaging only the Unallocated Space and Free Space from a drive.
- Advanced Search & Preview: Quickly find evidence by file name, keyword content, or MIME/File Signatures. Securely preview files directly from the bootable environment.
Disk & Evidence Management - Forensically Sound Wiping: Securely sterilize (wipe) media with a single-pass zero write, complete with a post-wipe verification hash for peace of mind.
- Flexible Formatting: Format destination drives to HFS+, FAT32, ExFAT, NTFS, or EXT4.
- Safe Mounting: Automatically mounts suspect devices as Read-Only to protect evidence integrity. Mount destination drives as Read-Write.
- On-the-Fly Verification: Instantly generate MD5 and SHA1 hashes for any device or forensic image.
- Image Mounting: Mount partitions from within a forensic image for quick review.
Reliable Logging & Reporting - Comprehensive Logs: Maintain a perfect chain of custody with detailed Task Logs (recording all session tasks) and Live Logs (monitoring current processes).
- Exportable Records: Easily save your logs to any destinat
