Atola Technology
4974 Kingsway Avenue, Suite 668 V5H 4M9 White Rock, BC, Canada

Insight 4.17 released! It brings to you: - AFF4 support - data entropy analysis - new imaging Cheatsheet and more updates!... #forensicimaging #atolainsightforensic https://blog.atola.com/aff4-imager/ See more

Atola Insight 4.17 feature preannouncement! Our updated imager can now calculate entropy on-the-fly. It gives a helicopter view of how data is distributed across the evidence space. The resulting imaging report will also contain the entropy map.

2020 was, for sure, an unusual year that tested us all. Despite the challenges and disruptions of the past 9 months, we look back at this time with a sense of accomplishment and gratitude to our customers, partners and teammates, for the continued support and cooperation. Read our 2020. Year in Review blog:

In this real case timeline comparison Aaron Sparling from the Portland Police Bureau shows how Magnet AUTOMATE in combination with Atola TaskForce can save your time and help you reduce backlogs in your lab. Spoiler alert: automation wins! #dfir #forensicautomation #forensicimaging

The Atola team wishes you peace, joy and prosperity throughout the coming year. Thank you for your continued support and partnership. We look forward to working with you in 2021. Let’s make it a good one!

ECC RAM is used in most servers and computers where data corruption cannot be tolerated (e.g. at financial, scientific, medical). And the same should be true for digital forensics! #forensicimaging https://blog.atola.com/ecc-ram-in-forensic-imagers/

Even if a RAID 5 has errors on multiple drives, TaskForce is able to reconstruct the missing data, identify its configuration and image the whole array! https://youtu.be/gF85tGxhlCA #forensicimaging

Another day, another success story from a customer: this time an automated imaging of a damaged head. Yes, many errors but lots of data recovered with no need for a human being involved! This is the magic of our automated imaging engine #forensicimaging #datarecovery

What RAID tags in TaskForce can tell about an anonymous array: - indication of mirrors - MBR location (likely the 1st drive) - file system and partition details... - spare drive - errors on the drive Even if it is a tricky RAID with a rare configuration and not automatically identifiable, these can help! https://atola.com/products/taskforce/manual/raid-tags.html #raid #forensicimaging

Insight has been around for nearly 7 years now, and its vast functionality continues to be developed. Our FAQ page has expanded, too, and includes many of the questions we have been receiving from you: https://atola.com/products/insight/manual/faq.html

12+ parallel imagings at 15 TB/hour on a variety of targets and sources: - drive-to-drive - drive-to-network - file-to-drive - RAID reassembly and image acquisition... - imaging to a file on a target drive - imaging to a file on an encrypted target drive See more

Check out our CTO Vitaliy Mokosiy 's interview to Forensic Focus about the advances in our hardware and software, the trends in the industry, and the ambition that is at the core of our development. https://www.forensicfocus.com/in/vitaliy-mokosiy-cto-atola/

One bad head of this drive only works with read look-ahead ATA feature disabled in Insight's imaging settings. Screenshot of a real case kindly provided by a customer. #forensicimaging

As comprehensive as the TaskForce manual is, there are so many hidden possibilities to the device! Check out our updated FAQ page: https://atola.com/products/taskforce/manual/faq.html

Reassemble and image a RAID with a missing device: - from drives or images (E01, RAW) - click 'Add missing device' if a drive/image is damaged or lost - works for RAID 1 and RAID 5... - both configuration autodetection & imaging use RAID redundancy #RAIDforensics https://youtu.be/wbnyNiqC4MQ

TaskForce's 2020.7.1 firmware is here! It makes TaskForce's work in your organization's network smoother than ever and further enhances autodetection of RAID with an unknown configuration: - add a missing device to a RAID 5 (or use it instead of a damaged one) - get up to 100,000,000 possible configurations checked automatically - get the output narrowed down to just 1 in 90+% of cases! ... For more, read our blog: https://blog.atola.com/taskforce-2020-7-1-raid-configurati/

TaskForce's case management system automatically records all operations with drives and the unit to ensure a forensically sound process. It is detailed, exact, exportable, and easily accessible in TaskForce interface. #digitalforensics https://youtu.be/uL107D71ZC0

TaskForce detects HPA and DCO hidden areas on the drive and allows access to these restricted areas in a matter of seconds, making sure you can acquire all data on the drive. #forensicimaging https://youtu.be/zBku5V9R6OE

TaskForce gets a magnetic cover that instantly prepares your unit for safe transportation! #digitalforensics

Imaging individual partitions of a RAID array can help you get the evidence faster. TaskForce's RAID partition preview will help you locate potential evidence and image selected partitions first. #RAIDforensics

RAID autodetection, assembly and imaging in TaskForce can help forensic examiners in so many ways! Check out the RAID section in TF manual to see how it works: https://atola.com/products/taskforce/manual/

TaskForce’s RAID autodetection module combined with the ability to perform multiple imaging sessions in parallel, makes this imager uniquely positioned to reassemble RAIDs with an unknown configuration and image such arrays or their individual partitions. Here is how it works with RAID 0 arrays! https://blog.atola.com/imaging-raid-0-array/

TaskForce automatically identifies mdadm-created RAID arrays with great precision by detecting controller metadata. TaskForce's Autodetection module instantly recognizes and applies the RAID configuration. No manual action needed! #RAIDforensics https://www.youtube.com/watch?v=B2ib-VDK7XI

Read the highlights from the NCCC's 2020 edition including a summary of the presentation about the multi-pass imaging system for damaged drives given by Atola's Yulia Samoteykina. Reach out to us if you have any questions about the subject or anything else! https://www.forensicfocus.com//highlights-from-the-nation/

Assembling and imaging RAID 5 array with unknown configuration have never been easier: - select the drives - apply the configuration suggested by Autodetection module - image the RAID array #forensicimaging... https://blog.atola.com/imaging-raid-5-array/ See more

TaskForce is now an ultimate time-saver in those tricky cases where #RAID type and configuration is unknown! Its RAID #Autodetection module identifies possible configurations, rebuilds a RAID array, and makes its imaging fast and easy! #RAIDarray https://www.forensicfocus.com//atola-introduces-raid-asse/

Thanks for all the great feedback we have been getting with regards to the new TaskForce release with RAID support. We could not have done it without you! #RAIDforensics https://blog.atola.com/forensic-raid-rebuild/

Guess what!? Our RAID configuration autodetection and imaging functionality is here! Starting today, TaskForce makes imaging of RAID arrays so much easier!! #RAIDforensics https://blog.atola.com/forensic-raid-rebuild/

A little teaser ;)

Create up to 5 images at a time: bit-to-bit copies on target drives and image files (E01, RAW, img, dd) on target drives or a local server. Imaging reports are generated automatically and contain details of the source and the targets, hash calculation and verification, timestamps and even drive health indices. See this video for more about imaging and reports: #forensicimager

The targets to which TaskForce can image (and it can be up to 5 at a time!) include drives with SATA, SAS, IDE, USB, NVMe and other interfaces (bit-to-bit copies), forensic files (E01, RAW, img, dd) on these drives or a local server. #forensicimaging https://www.youtube.com/watch?v=uXk4iX2dT00

Hard drives with physical damage, such as physically damaged head stack, require a complex imaging approach. This guide will explain how to retrieve data with minimal risk of data loss. #forensicimaging https://blog.atola.com/taskforce-imaging-drive-with-bad-he/

Atola Virtual Booth is going online shortly. Join us for a conversation at the usual hour! #atolavirtualbooth

Atola brought its breakthrough multi-pass imaging technology to the world over a decade ago and since then, we have helped solve thousands of tough cases involving damaged media. In this video, we show how our imagers securely and effortlessly handle drives with bad sectors and help you get the evidence. #forensicimaging... https://www.youtube.com/watch?v=k6ykw-mTp2k

An intuitive and quick task launch is one of the key principles in TaskForce interface design. It allows you to start multiple sessions in a matter of seconds. Here is what you need to know: #forensicimaging

#atolavirtualbooth

Atola imagers have a unique diagnostics module that checks a drive's circuit board, heads, media surface, firmware and file system. In a click of one button and 3 minutes you receive a full drive health report and get hints about the optimal imaging strategy. Watch this video about TaskForce's diagnostics feature! #forensicimager