RECON TRIAGE is an indispensable tool for anyone who needs to capture data from a running Mac computer. RECON TRIAGE automates live imaging, volatile data collections, RAM imaging and more!
Get answers quickly
RECON TRIAGE can get you answers to important questions quickly within minutes or even seconds with automated analysis.
No need to be a rocket scientist
RECON TRIAGE is designed for both novice and advanced investigators. Be up and running in seconds and produce hundreds of reports in minutes!
Supports the Latest macOS File Systems and Artifacts
- Process APFS and FileVault macOS computers
- Process hundreds of artifacts from iOS backups
- Built-in Live Imaging
- Automatic identification of Spoliation artifacts
- Advanced Timeline Analysis
- Identify the origin of files
- Automatic chat timeline construction for Messages and Skype
- Complete a MAC exam in minutes, not weeks
- Easily produce hundreds of reports – PDF, HTML, CSV and XML
- Image RAM, capture Volatile Data and much more !
Intelligent Live Imaging
Quickly identify the areas of data that are relevant to your investigation. RECON TRIAGE can build an artifact specific forensic image of the target Mac.
Recover vital data that other tools miss by capturing data stored in the Mac’s RAM.
RAM and Live Images can be imported into RECON LAB
All live images and RAM images produced by RECON TRIAGE can be processed easily in RECON LAB – SUMURI’s Flagship Full Forensic Suite which automates analysis of Mac, iOS, Windows and more! Find out about RECON Lab here.
Mac Forensics… Simplified
Expert Mac forensics is now as easy as checking a box.
RECON TRIAGE automatically finds important artifacts, parses the data and presents them to you in a unified format that can be refined to produce the perfect report.
RECON TRIAGE allows you to capture important volatile data which is crucial in investigating malware.
Mac Password Recovery
Quickly and easily recover Keychain and user passwords from most versions of macOS. (The Password Recovery feature is only available to vetted agencies and is not for export).