Atola Insight Forensic

From ForensicsWiki
Jump to: navigation, search

Atola Insight Forensic is a fast forensic acquisition system produced by Atola Technology capable of diagnosing and imaging damaged and unstable drives. It offers complex data retrieval functions along with utilities for manually accessing hard drives at the lowest level, wrapped in a simple and efficient user interface. The tool is developed by a team of data recovery engineers in collaboration with law enforcement agencies and forensic experts.

The system has several key features for data capture in forensic and e-discovery cases:

Atola Insight Forensic
  • Fastest in industry imaging speed up to 500 MB/s
  • High performance multi-pass imaging for damaged drives
  • In-depth Automatic HDD diagnostics
  • Extraction of unknown ATA Passwords
  • Case management system prepares acquisition reports automatically
  • Hash calculation: MD5, SHA1, SHA224, SHA256, SHA384, SHA512
  • Unclip DCO (device configuration overlay) and HPA (host protected area)
  • Forensic data erasure methods including DoD 5220.22-M, Security Erase, NIST 800-88, Pattern Erase
  • File recovery for NTFS (all versions), Ext 2/3/4, HFS, HFS+, HFSX, ExFAT, FAT16, FAT32
  • Support for SATA, IDE, SAS, USB media
  • Support for Apple PCIe (2013 - recent models) and M.2 PCIe SSDs via Atola extension modules
  • Built-in write blocker
  • Optional 10Gb Ethernet via extension modules

Major Imaging Parameters:

  • Disk duplication settings
  • Linear and segmented hash calculation (pre-hash, during imaging, post-hash)
  • Compare media after imaging
  • Specify read/write heads to transfer data from
  • HEX pattern to fill skipped sectors with (00 by default)
  • Read timeout setting
  • Number of sectors to skip after a failed read attempt
  • Adjustable number of passes
  • Apply Read-Long command on last pass
  • Imaging direction (linear or reverse)
  • Define image file size (chunk size)
  • Abort after X amount of automatic HDD power cycles

Atola Insight Forensic system includes:

  • Atola Insight Forensic software (runs on any Windows PC or laptop)
  • DiskSense hardware unit
  • Hardware extensions (optional)
  • Battery (optional)