Clik here to view.
Imaging Freezing Damaged Drives
When Atola Insight Forensic performs Imaging, it approaches bad sectors in the most gentle yet thorough way with high overall speed. But most importantly, Insight is unbeatable at imaging severely...
View ArticleScreencast: Imaging Drives with Damaged Heads
Watch this guide to learn how to optimize Insight’s imaging settings when working with a source drive with damaged or degraded heads. The post Screencast: Imaging Drives with Damaged Heads appeared...
View ArticleClik here to view.
Wiping multiple drives simultaneously
Erasing data on destination drives guarantees accuracy of the imaged data and helps verify that the drive has no errors. In the course, all sectors are overwritten with the help of selected pattern or...
View ArticleClik here to view.
Screenshot Analysis: Imaging a Freezing Drive
Recently, we received an email from a long-standing client. The drive he was imaging contained a large number of errors. We would like to use this screenshot of a real-case imaging process to...
View ArticleClik here to view.
Imaging a Source Drive to an E01 File with a Double Hash
In recent years, E01 file format has become the de facto standard format for forensic purposes due to its ability to store not only a physical or logical copy of a source drive, but also case and...
View ArticleClik here to view.
Calculating Hash During Imaging
Atola Insight Forensic supports hash calculation of both source and target devices in conjunction with imaging. We have developed highly flexible functionality to help optimize evidence acquisition...
View ArticleClik here to view.
Lifting HPA and DCO restrictions
Both HPA (host protected area) and DCO (device configuration overlay) features were created by hard drive manufacturers as hidden areas reserved for storing vendor utilities or simply to make a drive...
View ArticleClik here to view.
Extracting and Resetting an Unknown ATA Password
Insight can recover and/or remove unknown HDD passwords (also known as ATA passwords) and for most hard drives the unlocking process is fully automated. When a device is connected and identified as...
View ArticleClik here to view.
Verifying Damaged Target Images with Segmented Hashing
Last November Atola Technology team presented a new hashing method called Segmented hashing. Unlike the conventional linear hashing, segmented hashing produces not a single hash, but a list of hashes...
View ArticleClik here to view.
Q&A during Forensic Europe Expo
Atola team attended the annual Forensic Europe Expo on May 3 – 4 in London. We were pleased to meet both our existing and potential customers, and answer their questions about Atola Insight Forensic....
View ArticleClik here to view.
Case Management: Finding and Opening a Case
Insight’s Case Management system records every step of data acquisition process saving them into reports grouped by cases. To view the whole list of cases and their devices: Go to Case category in the...
View ArticleClik here to view.
Creating a logical image of a source drive
While physical imaging involves sector-for-sector copying the whole evidence drive from the first LBA to the last one, logical acquisition implies bit-for-bit copying of the file structure. Logical...
View ArticleClik here to view.
Calculating MD5 and SHA1 hashes of an existing E01 file
It is not uncommon that source evidence drives and their images may be involved in a long-running investigation case or wait to be presented in court for months or even years. Data stored on hard...
View ArticleClik here to view.
How we test our devices
Today we are offering you a sneak peek into Atola Technology office to show you our device storage system. As you know, Atola Insight Forensic and Atola Recycler both support the vast majority of...
View ArticleClik here to view.
Case Management: Print reports from a case
Insight’s Case Management system includes flexible printing functionality. To print a report click the Print link in the case’s Home page. In the Print Case History window you get all the reports...
View ArticleClik here to view.
Comparing Hashes of Source and Target to Find Modified Data
So you have a Source evidence drive and its image on a different device, and you have a record that their hash values were identical in the past. If you get a different hash value when you calculate...
View ArticleClik here to view.
Atola Insight Forensic 4.9 – Thunderbolt extension
We are delighted to announce the release of Atola Insight Forensic 4.9! With this release we introduce our new Thunderbolt extension module, which will enable forensically sound imaging and other...
View ArticleClik here to view.
Connecting MacBook using Thunderbolt extension module
Last week we released Atola Insight Forensic 4.9, which includes Thunderbolt extension module. This extension provides Insight users with the capability to image, calculate hash and perform other...
View ArticleClik here to view.
Case Management: Changing Details in a Case
Insight’s case management system has been created to help users efficiently keep track of hard drive-related information. Even if a hard drive has already been used for a while, imaging and hashing...
View ArticleClik here to view.
Multi-pass imaging of damaged drives
Atola Insight Forensic has a complex imaging functionality, which allows imaging even physically damaged hard drives, while avoiding further drive deterioration. Damaged drives require a complex...
View Article
