{"id":1686,"date":"2017-07-19T15:50:46","date_gmt":"2017-07-19T13:50:46","guid":{"rendered":"http:\/\/blog.atola.com\/?p=1686"},"modified":"2020-06-16T11:13:29","modified_gmt":"2020-06-16T09:13:29","slug":"comparing-drives","status":"publish","type":"post","link":"https:\/\/atola.com\/blog\/comparing-drives\/","title":{"rendered":"Comparing hashes of source and target to find modified data"},"content":{"rendered":"<p>So you have a Source evidence drive and its image on a different device, and you have a record that their hash values were identical in the past.<\/p>\n<div id=\"attachment_1687\" style=\"width: 891px\" class=\"wp-caption alignnone\"><img aria-describedby=\"caption-attachment-1687\" decoding=\"async\" loading=\"lazy\" class=\"wp-image-1687 size-full\" src=\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\" alt=\"\" width=\"881\" height=\"831\" srcset=\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png 881w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/1-Initial-hash-150x141.png 150w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/1-Initial-hash-300x283.png 300w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/1-Initial-hash-768x724.png 768w\" sizes=\"(max-width: 881px) 100vw, 881px\" \/><p id=\"caption-attachment-1687\" class=\"wp-caption-text\">Atola Insight Forensic: Imaging Results<\/p><\/div>\n<p>If you get a different hash value when you calculate the hash of the target now, it could be due to hardware failure, or because the device containing your image was used by a third party.<\/p>\n<div id=\"attachment_1688\" style=\"width: 801px\" class=\"wp-caption alignnone\"><img aria-describedby=\"caption-attachment-1688\" decoding=\"async\" loading=\"lazy\" class=\"wp-image-1688 size-full\" src=\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/2-New-hash.png\" alt=\"\" width=\"791\" height=\"713\" srcset=\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/2-New-hash.png 791w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/2-New-hash-150x135.png 150w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/2-New-hash-300x270.png 300w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/2-New-hash-768x692.png 768w\" sizes=\"(max-width: 791px) 100vw, 791px\" \/><p id=\"caption-attachment-1688\" class=\"wp-caption-text\">Atola Insight Forensic: Calculated Hash<\/p><\/div>\n<p>To understand how substantial these changes are, you will want to locate the sectors that have been modified.<\/p>\n<ol>\n<li>In the Disk Utilities category click Compare subcategory.<\/li>\n<li>Make sure that the whole range of sectors of the drive and radio button next to Device on DiskSense Target Port option is selected<\/li>\n<li>Click Compare button.<\/li>\n<\/ol>\n<p>Atola Insight Forensic&#8217;s high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors:<\/p>\n<div id=\"attachment_1689\" style=\"width: 885px\" class=\"wp-caption alignnone\"><img aria-describedby=\"caption-attachment-1689\" decoding=\"async\" loading=\"lazy\" class=\"wp-image-1689 size-full\" src=\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/3-different-sector-found.png\" alt=\"\" width=\"875\" height=\"713\" srcset=\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/3-different-sector-found.png 875w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/3-different-sector-found-150x122.png 150w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/3-different-sector-found-300x244.png 300w, https:\/\/atola.com\/blog\/wp-content\/uploads\/2017\/04\/3-different-sector-found-768x626.png 768w\" sizes=\"(max-width: 875px) 100vw, 875px\" \/><p id=\"caption-attachment-1689\" class=\"wp-caption-text\">Atola Insight Forensic compares source and target to help the operator identify and locate modified sectors<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>So you have a Source evidence drive and its image on a different device, and you have a record that their hash values were identical in the past. If you get a different hash value when you calculate the hash of the target now, it could be due to hardware [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Atola Insight Forensic: Comparing hashes to find modified data<\/title>\n<meta name=\"description\" content=\"Atola Insight Forensic&#039;s high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atola.com\/blog\/comparing-drives\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Atola Insight Forensic: Comparing hashes to find modified data\" \/>\n<meta property=\"og:description\" content=\"Atola Insight Forensic&#039;s high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.atola.com\/comparing-drives\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AtolaTechnology\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-19T13:50:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-06-16T09:13:29+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\" \/>\n<meta name=\"author\" content=\"Yulia Samoteykina\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:site\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yulia Samoteykina\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/\"},\"author\":{\"name\":\"Yulia Samoteykina\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\"},\"headline\":\"Comparing hashes of source and target to find modified data\",\"datePublished\":\"2017-07-19T13:50:46+00:00\",\"dateModified\":\"2020-06-16T09:13:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/\"},\"wordCount\":197,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\",\"articleSection\":[\"Atola Insight Forensic\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.atola.com\/comparing-drives\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/\",\"url\":\"https:\/\/blog.atola.com\/comparing-drives\/\",\"name\":\"Atola Insight Forensic: Comparing hashes to find modified data\",\"isPartOf\":{\"@id\":\"https:\/\/atola.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\",\"datePublished\":\"2017-07-19T13:50:46+00:00\",\"dateModified\":\"2020-06-16T09:13:29+00:00\",\"description\":\"Atola Insight Forensic's high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.atola.com\/comparing-drives\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage\",\"url\":\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\",\"contentUrl\":\"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.atola.com\/comparing-drives\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/atola.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Comparing hashes of source and target to find modified data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/atola.com\/blog\/#website\",\"url\":\"https:\/\/atola.com\/blog\/\",\"name\":\"Atola Blog\",\"description\":\"Atola Blog\",\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/atola.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/atola.com\/blog\/#organization\",\"name\":\"Atola Technology\",\"url\":\"https:\/\/atola.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"width\":840,\"height\":689,\"caption\":\"Atola Technology\"},\"image\":{\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/AtolaTechnology\",\"https:\/\/x.com\/atola_insight\",\"https:\/\/ua.linkedin.com\/company\/atola-technology\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\",\"name\":\"Yulia Samoteykina\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"caption\":\"Yulia Samoteykina\"},\"description\":\"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.\",\"url\":\"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Atola Insight Forensic: Comparing hashes to find modified data","description":"Atola Insight Forensic's high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atola.com\/blog\/comparing-drives\/","og_locale":"en_US","og_type":"article","og_title":"Atola Insight Forensic: Comparing hashes to find modified data","og_description":"Atola Insight Forensic's high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors","og_url":"https:\/\/blog.atola.com\/comparing-drives\/","article_publisher":"https:\/\/www.facebook.com\/AtolaTechnology","article_published_time":"2017-07-19T13:50:46+00:00","article_modified_time":"2020-06-16T09:13:29+00:00","og_image":[{"url":"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png"}],"author":"Yulia Samoteykina","twitter_card":"summary_large_image","twitter_creator":"@atola_insight","twitter_site":"@atola_insight","twitter_misc":{"Written by":"Yulia Samoteykina","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.atola.com\/comparing-drives\/#article","isPartOf":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/"},"author":{"name":"Yulia Samoteykina","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820"},"headline":"Comparing hashes of source and target to find modified data","datePublished":"2017-07-19T13:50:46+00:00","dateModified":"2020-06-16T09:13:29+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/"},"wordCount":197,"commentCount":0,"publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"image":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage"},"thumbnailUrl":"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png","articleSection":["Atola Insight Forensic"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.atola.com\/comparing-drives\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.atola.com\/comparing-drives\/","url":"https:\/\/blog.atola.com\/comparing-drives\/","name":"Atola Insight Forensic: Comparing hashes to find modified data","isPartOf":{"@id":"https:\/\/atola.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage"},"image":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage"},"thumbnailUrl":"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png","datePublished":"2017-07-19T13:50:46+00:00","dateModified":"2020-06-16T09:13:29+00:00","description":"Atola Insight Forensic's high-performance compare function will compare the source and the target and will help you identify and locate the modified sectors","breadcrumb":{"@id":"https:\/\/blog.atola.com\/comparing-drives\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.atola.com\/comparing-drives\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.atola.com\/comparing-drives\/#primaryimage","url":"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png","contentUrl":"http:\/\/blog.atola.com\/wp-content\/uploads\/2017\/04\/1-Initial-hash.png"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.atola.com\/comparing-drives\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atola.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Comparing hashes of source and target to find modified data"}]},{"@type":"WebSite","@id":"https:\/\/atola.com\/blog\/#website","url":"https:\/\/atola.com\/blog\/","name":"Atola Blog","description":"Atola Blog","publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atola.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atola.com\/blog\/#organization","name":"Atola Technology","url":"https:\/\/atola.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","width":840,"height":689,"caption":"Atola Technology"},"image":{"@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AtolaTechnology","https:\/\/x.com\/atola_insight","https:\/\/ua.linkedin.com\/company\/atola-technology"]},{"@type":"Person","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820","name":"Yulia Samoteykina","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","caption":"Yulia Samoteykina"},"description":"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.","url":"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/"}]}},"_links":{"self":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/1686"}],"collection":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/comments?post=1686"}],"version-history":[{"count":0,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/1686\/revisions"}],"wp:attachment":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media?parent=1686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/categories?post=1686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/tags?post=1686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}