CARBON is a virtualized forensic analysis tool for the Windows operating system, developed by SUMURI.
CARBON automatically virtualizes and bypasses Windows logons to give you instant access to the user's desktop. All virtualization is done in a manner which protects the data from changes or alterations.
- Write block internal and attached devices
- Includes PALADIN toolbox
- Seven forensic image formats
- Device cloning
- Data carving
- Custom search conditions