Atola Insight Forensic 5.7 Introduces New Logical Imaging Module For Faster Evidence Acquisition

Atola Technology has released a new software update 5.7 for Atola Insight Forensic, introducing a Logical Imaging module with powerful built-in filters. Insight Forensic is a compact forensic imaging system with advanced support for damaged media.

“We are pleased to announce a long-anticipated logical image acquisition in Atola Insight Forensic. This feature is designed to save forensic experts countless hours by enabling them to focus on specific files and folders on a healthy evidence drive,” says Vitaliy Mokosiy, CTO at Atola Technology. “With flexible built-in filtering, the process is streamlined to capture only the data that truly matters.”

Flexible Filtering Options

Logical imaging gives investigators greater control, speed and accuracy in their evidence acquisition workflows.

By default, logical imaging captures all files from a drive. Built-in include and exclude filters let users fine-tune the selection, targeting exactly what they need while excluding irrelevant data.

The filtering options include:

  • Manually selected partitions, folders and files (wildcards supported)
  • Predefined folder types (user or OS folders)
  • Predefined file types (videos, pictures, emails, documents, financial records and more)
  • File timestamps (accessed, created or modified)
  • File size (from 1 byte to infinity)
  • Hash values
  • File signatures (first bytes)

The information about applied filters is saved to a dedicated report once imaging is launched.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


For repeat efficiency, Insight users can save their customized filter settings for future imaging sessions or to share with colleagues working on different hardware units.

Pause and Resume Sessions

Any running logical imaging session can be paused anytime and resumed later. Only the remaining sectors with data from selected files will be imaged after the resume. 

This feature could be helpful when an examiner needs to:

  • Shut down the equipment and leave the lab for the night
  • Resume logical imaging process at another location

Compressed L01 with File Metadata and Hashes

Insight images selected data to L01 files, either compressed or not, with SHA-1 and/or MD5 hashes.

The L01 target file can be saved on a local PC, on a remote network drive or on a storage drive connected to the DiskSense 2 unit.

About Atola Insight Forensic system

Atola Insight Forensic is a fast forensic imager capable of running 3 imaging sessions in parallel. It also offers complex yet highly automated data recovery functions on failing storage devices and provides low-level utilities. The system includes the DiskSense 2 hardware forensic unit with extension modules managed by Insight Forensic software.

About Atola Technology

Atola Technology, based in the Vancouver area, Canada, designs advanced forensic imaging hardware tools for the global forensic market. Its engineering team, led by its founder and CEO Dmitry Postrigan and CTO Vitaliy Mokosiy, brings deep expertise in storage media and data recovery, creating forensic imagers that are both powerful and user-friendly.

To learn more, visit us at atola.com and find us on LinkedIn.

Marketing

Yulia Samoteykina

Director of Marketing

[email protected]

Sales

John Graham

Director of Sales and Business Development

[email protected]

Leave a Comment