Why You Want It



The World’s Most Popular Linux Forensic Suite

  • Includes Autopsy and Sleuthkit!
  • Includes built in write-blocking!

PALADIN is a modified “live” Linux distribution based on Ubuntu that simplifies various forensics tasks in a forensically sound manner via the PALADIN Toolbox. PALADIN is available in 64-bit and 32-bit versions.


Virtualization now included in PALADIN PRO with CARBON VFS!


PALADIN PRO now includes CARBON pre-installed for examiners who would like to try the software or purchase a license!





PALADIN has become the World’s #1 Forensic Suite used by thousands of digital forensic examiners from Law Enforcement, Military, Federal, State, and Corporate agencies.




The PALADIN Toolbox combines the power of several court-tested Open Source forensic tools into a simple interface that can be used by anyone. With the PALADIN Toolbox, a user can easily and quickly TRIAGE – SEARCH – IMAGE, and more!


Virtualization now included in PALADIN PRO with CARBON VFS!


With PALADIN PRO’s inclusion in every order of RECON ITR, examiners now can bypass Windows login credentials and virtualize computers instantly using CARBON!


CARBON gives its user the ability to virtualize, triage, image, compare, carve, search, and more all in one convenient solution, and examiners are able to try it free of charge with every PALADIN order today!


PALADIN includes Autopsy!


Autopsy is a FULL Featured GUI Forensic Suite with all the features you would expect in a forensic tool. Autopsy even contains advanced features not found in forensic suites that cost thousands.


Autopsy combined with PALADIN allows a user to conduct a forensic exam from beginning to end – triage to reporting and everything in-between Mac, Windows, Linux, and Android file systems.


Now Supports BitLocker Decryption through Logical Imaging


BitLocker Decryption


BitLocker is a full volume encryption feature included with Microsoft Windows (Home only) versions starting with Windows Vista.


Logical Imaging


The Logical Imager option allows the examiner to image folders and files and can be accessed through the Logical Imager module.




We’ve added 33 categories with over 100 tools to assist you with your forensic endeavors! PALADIN has a Forensic Lab literally on a disc. We are proud to have pre-compiled some of the best Open Source forensic tools that we can find. Help us help you! If something is missing that can benefit the forensic community, please let us know, and we will be happy to include it in a future update to PALADIN.