. data carving allows you to locate evidence that was deleted, destroyed, or never stored on the hard drive at all (page file, hibernation file, ram contents). custom carving is supported as well, including support for scalpel and ftk sets. in addition, advanced carving mode called belkacarvingtm is...