Every once in a while forensic examiners come across hard drives that get shorted. In most cases, a drive has become shorted after experiencing overvoltage either due to a power supply failure or as a result of a user error. Here is what happens to drive in these scenarios and how to fix this.
In TaskForce, Jumbo frames are activated by default to ensure maximum data transfer rates when imaging to a file on your server.
Atola TaskForce’s case management system allows you to print out all reports concerning your evidence, whether it is about dignosing, imaging, calculating hash or any other action.
We have just released Atola Insight Forensic 4.12 with Image file on source drive, automatic exFAT partition creation with performance-optimized parameters, hidden Smartware area detection for WD USB drives and other new exciting features!
This video explains how to image an NVMe drive to a file on your local network with Atola TaskForce. The image file is located on a local network. For more information about network setup and configurations, please follow this guide. NVMe imaging is possible with Atola M.2 SSD adapter.
Thunderbolt extension enables TaskForce to operate on all MacBooks with these interfaces: FireWire, Thunderbolt 2 and Thunderbolt 3 (2016 – 2017 models). There is no need to remove the SSD, Thunderbolt extension allows connecting the whole Apple laptop to TaskForce. Moreover, it is possible to work with all the recent Read more…
Some source evidence drives and their images can be involved in a long-running investigation case and wait to be presented in court for months or years on end. Data stored on such drives and their image files may eventually get corrupt. Therefore it may be critical for an investigator to Read more…
TaskForce system allows expanding its compatibility with other device interfaces via hardware extension modules. How to plug an extension module TaskForce system must be powered off before an extension module can be plugged: Power off TaskForce; Plug extension module into the Extension port; Power on TaskForce. Thunderbolt extension module With Read more…
Host protected area (HPA) and device configuration overlay (DCO) are special hidden areas. They were developed as a feature by hard drive manufacturers for secure storage of vendor utilities or to make a drive appear to have smaller capacity than the drive actually has. But for a while now, proficient users Read more…
Atola TaskForce supports hash calculation of both the evidence drive and the image in conjunction with imaging. We have developed highly flexible functionality to help optimize evidence acquisition process to fit one’s internal procedures while avoiding further damage to fragile media. To calculate hash of both the evidence and the image: Click Read more…