Last updated on August 9, 2019

PALADIN is a bootable forensic Linux
distribution based on Ubuntu and is
developed and provided as a courtesy by
SUMURI. The boot process has been
modified to assure that the internal or
external media of computers and devices
are not modified or mounted.
PALADIN is available as an ISO which can
be used to make a bootable DVD or USB.
Once booted, the user will find a host of
pre-compiled open-source forensic tools
that can be used to perform various tasks.

Boot Sumuri Paladin Live Session into Forensics Mode:

1_forensic_mode1_forensic_mode
Boot Screen
3._forensic_toolbox3._forensic_toolbox
Paladin Desktop

2._forensic_tools2._forensic_tools
Forensics Apps
Execute a forensic copy of USB disk:
4._clone_device4._clone_device
Paladin Toolbox Imager
Mount external USB Disk into Paladin:
6._mount-r6._mount-r
After completed the imaging action, task logs tab will show generated forensic image MD5 and SHA1 hashes.
7._Files_on_new_driver7._Files_on_new_driver
Later, you can set up search criteria to search your evidence in the mounted image. 
8._search8._search

More details, please check YouTube video about Paladin Installation and Basic Usage Video: