In recent years, E01 file format has become the de facto standard format for forensic purposes due to its ability to store not only a physical or logical copy of a source drive, but also case and evidence details. E01 file can also contain both MD5 and SHA-1 hashes. And Read more…
Recently, we received an email from a long-standing client. The drive he was imaging contained a large number of errors. We would like to use this screenshot of a real-case imaging process to illustrate how well Atola Insight Forensic handles imaging hard drives in such dire state. In the screenshot Read more…
Erasing data on destination drives guarantees accuracy of the imaged data and helps verify that the drive has no errors. In the course, all sectors are overwritten with the help of selected pattern or method. When you need to prepare multiple hard drives for imaging, Insight’s multitasking capabilities enable you to Read more…
Watch this guide to learn how to optimize Insight’s imaging settings when working with a source drive with damaged or degraded heads.
When Atola Insight Forensic performs Imaging, it approaches bad sectors in the most gentle yet thorough way with high overall speed. But most importantly, Insight is unbeatable at imaging severely damaged drives, while providing all the necessary tools for evidence verification and proper data storage formats. Insight’s ability to succeed even Read more…
Atola Insight Forensic 4.8 is released! In this version of Atola Insight Forensic software, we included a range of improvements to our core features. The full list of Atola Insight Forensic 4.8 changes can be found here: Atola Insight Forensic Changelog. Password recovery support on new drive models Password recovery now works Read more…
With each passing year, speed becomes a yet bigger issue for forensic specialists: while the capacity of hard drives grows exponentially, their speed does not keep up. A common 4TB drive’s speed constitutes up to 200 MB/s or 12 GB/min, which translates to more than 5 hours of imaging. And it Read more…
Hard drives with physical damage require a complex imaging approach. This guide will explain how to retrieve data with the minimal risk of data loss on a drive with a damaged head stack. If an Automatic Checkup report indicates that there is a problem with the heads, look at the Read more…
If you need to extract or reset an unknown password or perform drive recovery on a Seagate hard drive, use a Serial cable to connect the drive to the DiskSense unit. Take a minute to familiarize yourself with the Serial cable’s three connectors. On one side of the cable, there Read more…
When you image data from a drive involved in an investigation case, and the target drive will be holding a 1:1 clone of evidence data, in many cases it is critical that the target drive’s capacity is identical to that of the source drive. Should there be a difference in Read more…