Atola Technology

Atola Insight Forensic 4.2 released

Atola Insight Forensic 4.2 with support of image files on target media and greatly improved performance has been released.

The new version includes over 120 fixes and improvements. The most valuable changes are addressed below.

Full Atola Insight Forensic 4.2 change log is available here: Atola Insight Forensic Changelog.

World’s fastest forensic imager

Insight Forensic 4.2 got a great speed-up for imaging and other operations even being run on weak laptops. See our latest benchmark published in the blog.

Image files on target devices

Image files can now be created on exFat-formatted Target hard drives. The specific exFat-formatting with large cluster size is necessary for receiving good performance during imaging process.

So now you can take a big HDD, attach it to DiskSense unit and create as many image files as drive capacity allows. This is how image file on target can be created in Insight Forensic 4.2.

Image File on Target 1

This is how Imaging source SSD to image file located on a target drive looks like.

Imaging source HDD to Image File on Target

Much better File Recovery user experience

File Recovery got lots of UI and performance improvements:

  • More compact and meaningful file list where you can include all file cluster/sector numbers
  • New cumulative filters
  • Browsing and recovery 400% speed-up for USB devices
  • Browsing and recovery 300% speed-up for ext4 partitions
  • Improved look & feel
  • Tracking of already recovered files: visual (green background) + filter (Recovered / Non-recovered)
  • Added keyboard shortcuts and improved navigation

File Recovery UI

Some other significant features

Imaging presets can now be exported into files and imported back:

Import-Export Presets

 

Two hashes can be simultaneously calculated during Imaging or Calculate Hash:

2 hashes at time

 

All other major Insight Forensic 4.2 changes are listed here: Atola Insight Forensic Changelog.

How to upgrade

Insight Forensic 4.2 can be downloaded by all customers with an active software update subscription at no additional cost.

Where to buy

If you still do not have an Atola Insight Forensic and would like to place an order, this can be done directly via Atola Technology, or from a distributor near you:

http://atola.com/wheretobuy/

Additionally, we have  an upgrade program for owners of old Atola Insight. Please contact our Atola Technology sales to receive more specific information:

 

Benchmark of the upcoming Atola Insight Forensic 4.2

In modern world hard drives are getting bigger and bigger. Amounts of data stored grow every day and demand more efforts from forensic experts. Thus, the performance of the data acquisition process becomes more and more critical.

One of the major improvements in the upcoming 4.2 release is a significant speed-up of core disk operations:

  • Imaging
  • Hashing
  • Comparison
  • Wiping

Here are the latest benchmark results:

Atola Insight Forensic 4.2

Atola Insight Forensic 4.1/4.0

Disk imaging 418

391

Disk imaging with MD5

418

385

Disk imaging with SHA-1

312

312

MD5 calculation  449

371

SHA-1 calculation

312

312

Comparison with pattern 458

374

Disk wiping 470

447

Values represent Megabytes per second (MB/s).

The tests were performed on this couple of Samsung 840 PRO drives.

Atola Insight Forensic Benchmark SSD Drives

Benchmark screenshots

Disk imaging

Insight 4.2 Imaging Speed

 

MD5 hashing

Insight 4.2 Hashing Speed

 

Comparison with pattern

Insight 4.2 Comparison Speed

 

Disk wiping

Insight 4.2 Wiping Speed

Tags:

Atola Insight Forensic 4.1

Today we have released Atola Insight Forensic 4.1.

Our main efforts were put on bug fixing to make Atola Insight Forensic more stable and reliable, and version 4.1 includes over 100 fixes and improvements. The most significant changes are addressed below.

Full Atola Insight Forensic 4.1 change log is available here: Atola Insight Changelog.

Imaging: new Metadata-only option

New Metadata-only imaging mode allows copying of absolutely minimum amount of data for file browsing to work, this allows for imaging of specific files.

All sectors with metadata

Creating imaging sessions from File Recovery

It is now possible to create an imaging session that would include sectors of specific files. It works perfect together with the new ‘All sectors with metadata’ option in Imaging. So here’s the most quick scenario to image a pack of files:

  1. Start imaging with ‘All sectors with metadata’ selected.
  2. After imaging finishes, switch to target port and go to File Recovery.
  3. Find files you need to image and select them.
  4. Click ‘Image selected…’ button.
  5. Start new imaging session that copies data of the selected files.
  6. Re-visit File Recovery and see the files are 100% copied.

 

Automated sector analysis

Automated sector analysis was built in to Disk Editor and Imaging. When viewing sectors, known metadata is automatically parsed into a human-readable form.

Metadata types supported:

  • Master boot record
  • NTFS boot sector
  • NTFS file record
  • NTFS index
  • HFS volume header
  • HFS plus B tree header
  • ext super block
  • exFAT boot sector
  • FAT32 boot sector
  • FAT boot sector

File Record

File Record Parsed

 

Watch this screencast to see how you can analyse copied data right during Imaging:

 

Imaging presets

Imaging settings can now be saved into custom presets. Export/import operations will be added in Insight v.4.2

Imaging Preset

 

How to order

You can order Atola Insight Forensic from us directly, or from a distributor near you:
http://atola.com/wheretobuy/

Official Video about Atola Insight Forensic

We hope you’ll enjoy it!

Pre-order Atola Insight Forensic

Today Atola Insight Forensic has become available for pre-ordering.

Feel free to contact our Canadian sales office for a quote.

Tel:
1 888 540 2010
1 416 833 3501
Business hours: 10am – 6pm ET

Contact us via email

Atola Insight Forensic consists of the DiskSense Forensic unit plus the software. Here are some photos of the unit:

Front side

unit1

Right side

dsf-left-white

Left side

dsf-right-white

Back

unit2