Official Atola Blog

TaskForce is equipped with RAID configuration detection module and an ability to sustain multiple high-speed imaging sessions on its 18 ports. This makes it uniquely positioned to perform assembly of RAID with an unknown configuration and fast forensic imaging of such arrays. Assembling and imaging RAID 0 array To assemble RAID 0 follow these steps: Connect the drives that make up a RAID array to the TaskForce hardware unit. Make sure to switch the ports to the Source mode; Click the RAID button in the left-side taskbar 3. Select the drives in Select source device panel and click Continue Let’s look at the RAID page in TaskForce interface. At the Read more…

By Olga Milishenko, 1 day ago

Atola TaskForce

Imaging RAID 5 array with Atola TaskForce

Atola supports RAID imaging and provides a breakthrough configuration autodetection module for RAID 0, 1 and 5 with NTFS and ext4/3/2 file systems. More RAID types and file systems will be supported in the upcoming releases with RAID 10 coming by the end of 2020. Here is how to make a RAID image from RAID 5 with an unknown configuration. The RAID array can be imaged as a whole only its individual partitions.

By Yulia Samoteykina, 1 week ago

Atola TaskForce

Forensic RAID rebuild in Atola TaskForce 2020.7

Today we are introducing the largest firmware update of Atola TaskForce ever – 2020.7. It adds a new facet to the product turning it into the first forensic hardware RAID imager in the world! I’d like to start by revealing the pain digital forensic experts have these days. Quotes of forensic examiners about RAID image acquisition: “How would one go about imaging a “RAID server” “I will normally use <data recovery tool> to reconstruct they RAID as I like their interface and the ability to manually select different RAID parameters.” “I am looking for options to Image a RAID storage on a windows 10 computer” “…image the drives individually, and Read more…

By Vitaliy Mokosiy, 2 weeks ago

Atola TaskForce

Damaged drive imaging with TaskForce: A drive with a damaged head

A damaged hard drive, especially when it comes to evidence drives, requires a complex imaging approach to avoid the drive’s further deterioration and data loss. TaskForce system enhances your working with damaged evidence drives, minimizing the risk of losing data on the working part of the head stack. Diagnostics and selective head imaging TaskForce’s built-in drive diagnostics module automatically checks all subsystems of the evidence drive. At the end of the diagnostics process, it provides a clear and detailed report about its electronics and motor, head stack, media surface, firmware and file system. In the Heads section of the diagnostics report, TaskForce forensic imager provides detailed information about the state Read more…

By Olga Milishenko, 1 month ago

Conferences

Q&A during the Interpol Digital Forensics Expert Group 2020

On Tuesday, June 16 Atola’s Yulia Samoteykina spoke at Interpol’s annual Digital Forensic Expert Group. After the presentation about our imagers’ multi-pass imaging system and other damaged media functionality, we received a few follow-up questions. In this blog we would like to reiterate the answers to these questions: Can Atola imager acquire evidence from damaged SSDs? As is true with any type of media, the degree of damage will inform how we can help with data recovery from a specific device. SSD failures fall into three major categories: logical errors, hardware issues, firmware failure. Atola imagers may be able to image data from an SSD with logical errors or hardware Read more…

By Vitaliy Mokosiy, 2 months ago