Carbon

Carbon enables instant virtualization of any Windows computer without the need for disassembly or imaging.

Automatic by-passing of Windows logon passwords allows you to access a user’s desktop quickly for triage or documentation. Absolutely no changes are made to the data and there is no evidence that the virtualization occurred. Built-in write-blocking and forensic imaging makes CARBON extremely powerful!

CARBON also includes RECON for Windows which automates the discovery, parsing and reporting of Windows forensic artifacts quickly as well as an advanced data carver and search tools.

Now with Samsung DUO plus 128GB.

Note: You have a 15 month period (1 year and 3 months) from the start date to renew software at the renewal list price, after this time you will have to pay the full price for the software.

WINDOWS LOGON PASSWORDS AUTOMATICALLY BYPASSED

CARBON automatically virtualizes and bypasses Windows logons to give you instant access to the user’s desktop. All virtualization is done in a manner which protects the data from changes or alterations.

As no changes are made, the virtualization is undetectable.

WRITE-BLOCKING AND IMAGING INCLUDED

After using CARBON to instantly virtualize and preview a computer preserving the data is only a click away.

CARBON is based on PALADIN and includes its ability to write-block internal and attached devices. CARBON also includes the PALADIN Toolbox which offers you a choice of seven forensic image formats and also device cloning.

DATA CARVING AND ADVANCED SEARCHING

CARBON includes predefined categories for carving data from allocated or unallocated space. CARBON gives you the ability to add your own custom carving or search conditions which can be saved as templates.