Call us: 10am – 6pm ET

888 540-2010, 416 833-3501

Scripting

There is an AtolaScript language that helps run custom forensic scripts for devices and their data. Our scripting is easy to learn even if it is your first language. AtolaScript is extremely simple and has a set of rules explained in the short cheat sheet.

There are more than 50 AtolaScript commands that enable you to execute any actions, from reading sectors to running long-lasting operations like the HEX pattern search.

Transparent user experience

We realized that some of our customers have no time to learn how to program. That is why we made the scripting process as simple as possible. The embedded AtolaScript editor transparently shows UI-friendly command/parameter panels when you are editing your script. In addition, there are 16 script samples that show AtolaScript’s power and simplicity, accelerating your learning curve.

Command panel eases script writing

Command panel eases script writing

Custom ATA commands

Atola Insight Forensic is the first forensic solution that enables to run custom ATA commands on SATA/IDE drives. There are three commands for your convenience — Ata, AtaIn, and AtaOut — to run ATA commands without data transfer, with data-in and data-out transfers correspondingly.

Changing sector 1200 using AtaOut command

Changing sector 1200 using AtaOut command

Powerful regular expression search

Scripting offers you to take advantage of a search engine that is based on Intel Hyperscan, a high-performance multiple regex matching library. You are able to run searches throughout the whole device, including unallocated space. There are three available commands:

The commands work for all SATA, USB, SAS, IDE devices plugged into the DiskSense unit.

Word search in multiple encoding at a time

Word search in multiple encoding at a time

Case reporting

Atola Insight’s case management system automatically stores executed scripts and resulting logs in nicely formatted reports.

Scripting case report

Scripting case report

Example - Writing a script to find NTFS INDX records in MFT