Atola TaskForce has a complex imaging functionality, which allows imaging even physically damaged drives, while avoiding further drive deterioration. Damaged media require a sophisticated imaging approach to balance out thorough data extraction with forensics’ need in expediency and careful treatment of damaged media.
When the target drive is larger than the source evidence drive, the target hash will not be identical to the hash of the source. To avoid this, you can limit the drive space by enabling HPA to a SATA target.
Create a new E01 file, to which you will image your evidence and select both MD5 and SHA1 hashes to be calculated in the course of imaging.
SMART table is a valuable source of information about a hard drive’s health. SMART (Self-Monitoring, Analysis and Reporting Technology) provides stats of a drive’s operation, thus helping predict its future failure.
If you need to create multiple images of a drive for different purposes, with Insight you can image to three targets simultaneously.