Data Forensics Tools

CARBON - Virtual Forensic Suite
Model: CARBON CARBON is a revolutionary new product in computer forensics, it allows you to virtualize any Windows computer instantly. Special Features: • Virtual forensics: no disassembly required
• Windows logon passwords automatically bypassed
• Write-blocking and imaging included
• Automated Windows forensics in minutes
• Data carving and advanced searching

Description

INSTANTLY VIRTUALIZE WINDOWS

THE ONLY TOOL ABLE TO VIRTUALIZE WITHOUT IMAGING OR DISSASEMBLY!
CARBON - Virtual Forensic Suite is a revolutionary new tool which allows you to instantly virtualize any Windows computer without imaging or disassembly! There is no complicated configuration or setup required. You can literally boot a Windows computer in minutes! Additionally, CARBON handles the tasks of bypassing user logon passwords and troublesome hardware configurations. And of course we can also virtualize both common and uncommon forensic and virtual machine image types.

CARBON also includes RECON for Windows (which automatically identifies and parses Windows forensic artifacts), and a customizable advanced data carver and file search tools.

WRITE-BLOCKING AND IMAGING INCLUDED

After using CARBON to instantly virtualize and preview a computer preserving the data is only a click away.

CARBON is based on PALADIN and includes its ability to write-block internal and attached devices. CARBON also includes the PALADIN Toolbox which offers you a choice of seven forensic image formats and also device cloning.

AUTOMATED WINDOWS FORENSICS
IN MINUTES

CARBON includes RECON for Windows - software that automates the discovery and parsing of Windows forensic artifacts. Simply select the artifacts that you would like to find and RECON does the rest. The recovered artifacts can then be sorted, filtered, bookmarked and placed in an advanced timeline. Endless reporting options are available.

DATA CARVING AND ADVANCED SEARCHING

CARBON includes predefined categories for carving data from allocated or unallocated space. CARBON gives you the ability to add your own custom carving or search conditions which can be saved as templates.

Technical Info

Safely boot a suspect computer in minutes
 • without imaging
• without disassembly

Bypass Windows passwords
• Windows XP through Windows 10

Advanced file search
• File names, file signatures and keywords

Advanced data carving
• Hundreds of file types supported

Advanced triage
• Automated Windows triage

Write blocking and forensic imager
• Built on paladin and includes a 250GB USB 3.0 SSD

Features

• Instantly Virtualize Thousands of Windows Devices - No Imaging and No Disassembly
• Largest Support for Virtualizing Forensic Images and VM Images
• Automatically Bypass Windows Logon Passwords and Hardware Conflicts
• Document your Investigation with Built-in Video or Screenshots
• Includes RECON for Windows - Automatic Windows Forensics
• Advanced Artifact Timeline Analysis
• Create 1000+ Customized Reports in PDF, HTML, CSV and XML
• Customizable Advanced File Searches - Keywords, Signatures and Names
• Customizable Advanced Data Carving
• Software Write-Blocker and Imager Included
• Includes Samsung T3 250 GB USB 3.1 External Drive
Back