A situation may occur when multi-target imaging is paused to be continued later, but one or more targets become unavailable. The drive may need to be taken and used by another technician or broken, or the server with the image file may become unavailable. But you may need to finish the imaging to the remaining target asap to start working on the evidence.
It is for such cases that we have added the splitting imaging sessions functionality to the 4.9 release of Atola Insight Forensic.
With the source drive connected to Insight, go to Imaging category and view the details of the interrupted imaging session to several targets. If not all target drives and image files are available, it is impossible to simply resume imaging. However it is possible to split the previous imaging session into separate ones: one per each target. To do that click Split all sessions to separate targets link.
Once the session has been split, it is possible to resume imaging to each separate target by clicking Resume button in each target’s Imaging Session.
The resumed imaging session will skip all sectors imaged to the target within the previous session.
This way one can complete imaging to all targets at different times, as they become available.
NB Please note that if a target becomes unavailable during imaging, the process will automatically stop running, and you can try to either resume imaging to all targets, or split imaging sessions should it be necessary.
- XFS, RAID 10 and new imaging features. TaskForce 2021.8 is here! - September 8, 2021
- Imaging and hot plug of NVMe drives with DiskSense 2 - August 19, 2021
- The Story of Atola Insight hardware - July 13, 2021