TaskForce automatically creates reports for every single action applied to each drive connected to it. Whether it is a source drive or a target drive, any action, be it imaging, wiping or physically switching write protection on or off, will be documented and stored in the system.
To find a case, click Cases in the top left corner, it will redirect you to the case management system.
Search for a specific case or device in the Search bar (by case ID, investigator’s name or device details) and sort results by any column.
To open a case, click the respective line in the list.
A case page contains case details, information about the devices associated with the case (name, serial number, capacity etc.), as well as reports for all tasks applied to the device.
NB At the moment, a case may only include one device. In the future releases, we will be adding the possibility to add multiple devices in a case as well as including the same device within a number of cases.
Editing case details
To change case details, click on Edit button at the bottom of a case page.
It is possible to change the case ID, Description and Investigator. Click Save changes button when done editing.
In upcoming software releases, we will be adding the possibility to store multiple drives under the same case number. We will also be adding the possibility to upload pictures (photos of the device, scanned reports and documents related to the drive etc.) to be stored in a case.
- RAID 10 configuration autodetection and imaging - October 20, 2021
- XFS, RAID 10 and new imaging features. TaskForce 2021.8 is here! - September 8, 2021
- Imaging and hot plug of NVMe drives with DiskSense 2 - August 19, 2021