Atola Releases TaskForce 2021.8 Firmware With XFS, RAID 10, Imaging Enhancements

Atola software development team has long been focused on supporting more filesystems for the different system modules as well as RAID types to enhance the work with arrays of drives with an unknown configuration. The 2021.8 release also includes additions to the imaging module.

XFS support

XFS is a popular high-performing filesystem in the Linux world and its support has been requested by some of our customers. XFS is now supported across the TaskForce functionality. Crucially, in these three modules:

  • Imaging
  • RAID autodetection
  • Browse files

Added value: TaskForce uses Atola’s own custom algorithms to search, parse and validate a filesystem. While other tools rely on Linux’s own response regarding the filesystem, TaskForce makes use of the raw data it reads. This way it is able to identify and mount even an XFS volume that is stored on a damaged drive, within an image file or a different non-standard media.

HEX viewer and Signatures tabs in Imaging

In the Imaging progress page, the new tabs are located below the imaging graph along with the Log tab.

  • Signatures: the live stats of file signatures is a new addition for on-the-fly tracking of the parsed data. The tab indicates the number of predefined or custom file signatures found on the drive and provides access to the statistics.
  • HEX viewer tab shows the real-time sectors read result in both HEX and ASCII modes with a freeze option that allows a closer look.

Use case: By addressing these tabs during imaging, users can understand whether the drive is blank, encrypted or filled with data. This enables timely re-prioritization of the imaging jobs. If the Signature tab registers zero results during imaging, it implies that the evidence drive is either blank or the data being imaged belongs to an encrypted partition. To conclude whether the drive contains data, switch to the Target HEX viewer tab. If the imaged sectors are filled with zeros, or a pattern, it is a blank drive. But random data within sectors will suggest that the data belongs to an encrypted partition.


Get The Latest DFIR News!

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

RAID 10

RAID 10 is an addition to RAID 0, 1, 5 and JBOD that are already supported in TaskForce. This RAID type has high performance and data security properties and is often used for production and hosting servers. It is frequently encountered in investigations and has been requested by our customers.

Use case: Drives from RAID arrays often arrive in a lab as a bunch of drives, without information about the controller or configuration of the RAID they belonged to. TaskForce’s RAID configuration autodetection module identifies the RAID type, helps arrange the drives in the correct order and suggests suitable RAID configurations. Upon the application of the detected configuration, the RAID is mounted and its contents are available for preview in the Partition section of the screen. The RAID can then be imaged in its entirety or its individual partitions can be selected for acquisition.

Leave a Comment

Latest Videos

Magnet Forensics' Matt Suiche on the Rise of e-Crime and Info Stealers

Forensic Focus 12th January 2023 3:00 am

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast. 

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading -  https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast.

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading - https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_BhrBg5_sAKo

Si and Desi Holiday Special 2022

Forensic Focus 16th December 2022 12:00 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...