{"id":3234,"date":"2019-04-04T19:05:36","date_gmt":"2019-04-04T17:05:36","guid":{"rendered":"http:\/\/blog.atola.com\/?p=3234"},"modified":"2022-10-26T14:02:41","modified_gmt":"2022-10-26T12:02:41","slug":"imaging-e01-dual-hash","status":"publish","type":"post","link":"https:\/\/atola.com\/blog\/imaging-e01-dual-hash\/","title":{"rendered":"Imaging to an E01 file with dual hash"},"content":{"rendered":"\r\n

E01 file format is <\/g>the de facto standard format for forensic examiners to store images due to its ability to store not only a copy of the evidence drive,<\/g> but also case and evidence details. E01 file can also store both MD5 and SHA1 hash values calculated during imaging.<\/p>\r\n\r\n\r\n\r\n

To image a source evidence drive to an E01 file, you have to create a new target file.<\/p>\r\n\r\n\r\n\r\n

Creating a new E01 file<\/h3>\r\n\r\n\r\n\r\n
    \r\n
  1. Click\u00a0Image<\/em>\u00a0in the left-side menu<\/li>\r\n
  2. Select the source evidence drive in\u00a0Select source device<\/em> panel<\/li>\r\n
  3. Click\u00a0Select File<\/em> in Select target devices<\/em> panel<\/li>\r\n
  4. In the file selector<\/g>, find the folder to store the image and click the plus (+) button in the bottom right corner<\/li>\r\n
  5. In the pop-window, select E01 file type and click\u00a0Create<\/em>\u00a0button<\/li>\r\n
  6. Fill in E01 file information and click\u00a0Create<\/em>\u00a0button.<\/li>\r\n
  7. Click\u00a0Continue<\/em>\u00a0button<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n
    \"\"\r\n
    Create an E01 file<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

    Enable dual-hash and start imaging<\/h3>\r\n\r\n\r\n\r\n
      \r\n
    1. Once you have selected the source drive and created the target file, you end up in\u00a0Settings summary<\/em>\u00a0page. Click\u00a0Change<\/g><\/em>\u00a0button to adjust the imaging settings.<\/li>\r\n
    2. In the\u00a0Hashes<\/em>\u00a0tab make sure that\u00a0Hash source during imaging<\/em>\u00a0is selected, also select both MD5 and SHA1 hash types.<\/li>\r\n
    3. Click Start<\/g> button to proceed with imaging.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n
      \"\"\r\n
      Adjust imaging settings<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

      The report and the E01 file<\/h3>\r\n\r\n\r\n\r\n
      \"\"\r\n
      The report<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

      Upon completion of imaging, you can see both MD5 and SHA1 hash values indicated in the\u00a0Imaging completed<\/em>\u00a0report.<\/p>\r\n\r\n\r\n\r\n

      \"\"\r\n
      E01 file with calculated MD5 and SHA1 hashes<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

      It is also possible to look up the information of the created E01 file. To do that, perform the following actions:<\/p>\r\n\r\n\r\n\r\n

        \r\n
      1. Open the\u00a0Devices<\/em>\u00a0menu by clicking the Devices button in the upper right corner.<\/li>\r\n
      2. In the File section, you can see the recently created files.<\/li>\r\n
      3. Click the corresponding E01 file to view its metadata.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n

        The MD5 and SHA hash values will be there.<\/p>\r\n\r\n\r\n","protected":false},"excerpt":{"rendered":"

        Create a new E01 file, to which you will image your evidence and select both MD5 and SHA1 hashes to be calculated in the course of imaging.<\/p>\n","protected":false},"author":8,"featured_media":3237,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45],"tags":[],"yoast_head":"\nImaging to an E01 file with dual hash<\/title>\n<meta name=\"description\" content=\"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atola.com\/blog\/imaging-e01-dual-hash\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Imaging to an E01 file with dual hash\" \/>\n<meta property=\"og:description\" content=\"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AtolaTechnology\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-04T17:05:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-10-26T12:02:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.atola.com\/wp-content\/uploads\/2019\/03\/3report.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2736\" \/>\n\t<meta property=\"og:image:height\" content=\"1824\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Yulia Samoteykina\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:site\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yulia Samoteykina\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\"},\"author\":{\"name\":\"Yulia Samoteykina\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\"},\"headline\":\"Imaging to an E01 file with dual hash\",\"datePublished\":\"2019-04-04T17:05:36+00:00\",\"dateModified\":\"2022-10-26T12:02:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\"},\"wordCount\":314,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png\",\"articleSection\":[\"Atola TaskForce\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\",\"url\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\",\"name\":\"Imaging to an E01 file with dual hash\",\"isPartOf\":{\"@id\":\"https:\/\/atola.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png\",\"datePublished\":\"2019-04-04T17:05:36+00:00\",\"dateModified\":\"2022-10-26T12:02:41+00:00\",\"description\":\"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png\",\"width\":2736,\"height\":1824,\"caption\":\"Imaging completion report\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/atola.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Imaging to an E01 file with dual hash\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/atola.com\/blog\/#website\",\"url\":\"https:\/\/atola.com\/blog\/\",\"name\":\"Atola Blog\",\"description\":\"Atola Blog\",\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/atola.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/atola.com\/blog\/#organization\",\"name\":\"Atola Technology\",\"url\":\"https:\/\/atola.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"width\":840,\"height\":689,\"caption\":\"Atola Technology\"},\"image\":{\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/AtolaTechnology\",\"https:\/\/x.com\/atola_insight\",\"https:\/\/ua.linkedin.com\/company\/atola-technology\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\",\"name\":\"Yulia Samoteykina\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"caption\":\"Yulia Samoteykina\"},\"description\":\"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.\",\"url\":\"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Imaging to an E01 file with dual hash","description":"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atola.com\/blog\/imaging-e01-dual-hash\/","og_locale":"en_US","og_type":"article","og_title":"Imaging to an E01 file with dual hash","og_description":"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.","og_url":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/","article_publisher":"https:\/\/www.facebook.com\/AtolaTechnology","article_published_time":"2019-04-04T17:05:36+00:00","article_modified_time":"2022-10-26T12:02:41+00:00","og_image":[{"width":2736,"height":1824,"url":"https:\/\/blog.atola.com\/wp-content\/uploads\/2019\/03\/3report.png","type":"image\/png"}],"author":"Yulia Samoteykina","twitter_card":"summary_large_image","twitter_creator":"@atola_insight","twitter_site":"@atola_insight","twitter_misc":{"Written by":"Yulia Samoteykina","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#article","isPartOf":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/"},"author":{"name":"Yulia Samoteykina","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820"},"headline":"Imaging to an E01 file with dual hash","datePublished":"2019-04-04T17:05:36+00:00","dateModified":"2022-10-26T12:02:41+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/"},"wordCount":314,"commentCount":0,"publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"image":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png","articleSection":["Atola TaskForce"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/","url":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/","name":"Imaging to an E01 file with dual hash","isPartOf":{"@id":"https:\/\/atola.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage"},"image":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png","datePublished":"2019-04-04T17:05:36+00:00","dateModified":"2022-10-26T12:02:41+00:00","description":"Imaging to an E01 file with dual hash: To image a source evidence drive to an E01 file, you have to create a new target file.","breadcrumb":{"@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.atola.com\/imaging-e01-dual-hash\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#primaryimage","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2019\/03\/3report.png","width":2736,"height":1824,"caption":"Imaging completion report"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.atola.com\/imaging-e01-dual-hash\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atola.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Imaging to an E01 file with dual hash"}]},{"@type":"WebSite","@id":"https:\/\/atola.com\/blog\/#website","url":"https:\/\/atola.com\/blog\/","name":"Atola Blog","description":"Atola Blog","publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atola.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atola.com\/blog\/#organization","name":"Atola Technology","url":"https:\/\/atola.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","width":840,"height":689,"caption":"Atola Technology"},"image":{"@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AtolaTechnology","https:\/\/x.com\/atola_insight","https:\/\/ua.linkedin.com\/company\/atola-technology"]},{"@type":"Person","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820","name":"Yulia Samoteykina","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","caption":"Yulia Samoteykina"},"description":"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.","url":"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/"}]}},"_links":{"self":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3234"}],"collection":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/comments?post=3234"}],"version-history":[{"count":1,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3234\/revisions"}],"predecessor-version":[{"id":6659,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3234\/revisions\/6659"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media\/3237"}],"wp:attachment":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media?parent=3234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/categories?post=3234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/tags?post=3234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}