Clik here to view.
Connecting Seagate Drives to Serial Port
If you need to extract or reset an unknown password or perform drive recovery on a Seagate hard drive, use a Serial cable to connect the drive to the DiskSense unit. Take a minute to familiarize...
View ArticleClik here to view.
Imaging Drives with Damaged Heads
Hard drives with physical damage require a complex imaging approach. This guide will explain how to retrieve data with the minimal risk of data loss on a drive with a damaged head stack. If an...
View ArticleClik here to view.
Multitasking Capabilities of Atola Insight Forensic
With each passing year, speed becomes a yet bigger issue for forensic specialists: while the capacity of hard drives grows exponentially, their speed does not keep up. A common 4TB drive’s speed...
View ArticleClik here to view.
Atola Insight Forensic 4.8 release
Atola Insight Forensic 4.8 is released! In this version of Atola Insight Forensic software, we included a range of improvements to our core features. The full list of Atola Insight Forensic 4.8 changes...
View ArticleClik here to view.
Imaging Freezing Damaged Drives
When Atola Insight Forensic performs Imaging, it approaches bad sectors in the most gentle yet thorough way with high overall speed. But most importantly, Insight is unbeatable at imaging severely...
View ArticleScreencast: Imaging Drives with Damaged Heads
Watch this guide to learn how to optimize Insight’s imaging settings when working with a source drive with damaged or degraded heads. The post Screencast: Imaging Drives with Damaged Heads appeared...
View ArticleClik here to view.
Wiping multiple drives simultaneously
Erasing data on destination drives guarantees accuracy of the imaged data and helps verify that the drive has no errors. In the course, all sectors are overwritten with the help of selected pattern or...
View ArticleClik here to view.
Screenshot Analysis: Imaging a Freezing Drive
Recently, we received an email from a long-standing client. The drive he was imaging contained a large number of errors. We would like to use this screenshot of a real-case imaging process to...
View ArticleClik here to view.
Imaging a Source Drive to an E01 File with a Double Hash
In recent years, E01 file format has become the de facto standard format for forensic purposes due to its ability to store not only a physical or logical copy of a source drive, but also case and...
View ArticleClik here to view.
Calculating Hash During Imaging
Atola Insight Forensic supports hash calculation of both source and target devices in conjunction with imaging. We have developed highly flexible functionality to help optimize evidence acquisition...
View ArticleClik here to view.
Lifting HPA and DCO restrictions
Both HPA (host protected area) and DCO (device configuration overlay) features were created by hard drive manufacturers as hidden areas reserved for storing vendor utilities or simply to make a drive...
View ArticleClik here to view.
Extracting and Resetting an Unknown ATA Password
Insight can recover and/or remove unknown HDD passwords (also known as ATA passwords) and for most hard drives the unlocking process is fully automated. When a device is connected and identified as...
View ArticleClik here to view.
Verifying Damaged Target Images with Segmented Hashing
Last November Atola Technology team presented a new hashing method called Segmented hashing. Unlike the conventional linear hashing, segmented hashing produces not a single hash, but a list of hashes...
View ArticleClik here to view.
Q&A during Forensic Europe Expo
Atola team attended the annual Forensic Europe Expo on May 3 – 4 in London. We were pleased to meet both our existing and potential customers, and answer their questions about Atola Insight Forensic....
View ArticleClik here to view.
Case Management: Finding and Opening a Case
Insight’s Case Management system records every step of data acquisition process saving them into reports grouped by cases. To view the whole list of cases and their devices: Go to Case category in the...
View ArticleClik here to view.
Creating a logical image of a source drive
While physical imaging involves sector-for-sector copying the whole evidence drive from the first LBA to the last one, logical acquisition implies bit-for-bit copying of the file structure. Logical...
View ArticleClik here to view.
Calculating MD5 and SHA1 hashes of an existing E01 file
It is not uncommon that source evidence drives and their images may be involved in a long-running investigation case or wait to be presented in court for months or even years. Data stored on hard...
View ArticleClik here to view.
How we test our devices
Today we are offering you a sneak peek into Atola Technology office to show you our device storage system. As you know, Atola Insight Forensic and Atola Recycler both support the vast majority of...
View ArticleClik here to view.
Case Management: Print reports from a case
Insight’s Case Management system includes flexible printing functionality. To print a report click the Print link in the case’s Home page. In the Print Case History window you get all the reports...
View ArticleClik here to view.
Comparing Hashes of Source and Target to Find Modified Data
So you have a Source evidence drive and its image on a different device, and you have a record that their hash values were identical in the past. If you get a different hash value when you calculate...
View Article