{"id":3937,"date":"2020-04-03T14:53:13","date_gmt":"2020-04-03T12:53:13","guid":{"rendered":"http:\/\/blog.atola.com\/?p=3937"},"modified":"2022-10-26T15:08:36","modified_gmt":"2022-10-26T13:08:36","slug":"atola-taskforce-data-verification","status":"publish","type":"post","link":"https:\/\/atola.com\/blog\/atola-taskforce-data-verification\/","title":{"rendered":"Using segmented hashing in Atola TaskForce for data verification"},"content":{"rendered":"\r\n

Segmented hashing is a concept introduced into forensic imaging by Atola Technology in November of 2016.<\/p>\r\n\r\n\r\n\r\n

This method of hashing allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.<\/p>\r\n\r\n\r\n\r\n

How does it work?<\/h3>\r\n\r\n\r\n\r\n

With the conventional hashing method, it is impossible to calculate hash for the entire space of a damaged evidence drive: linear hashing will stop upon encountering the first bad sector.<\/p>\r\n\r\n\r\n\r\n

Segmented hashing can be performed during multi-pass imaging of a damaged drive. This method produces a set of hash values for individual LBA ranges of the evidence drive and the image. Hashes are calculated only for the successfully imaged areas, while all bad sectors are excluded from the calculation.<\/p>\r\n\r\n\r\n\r\n

With segmented hashing, you can prove that the entire image has not been tampered with by verifying all hashes in a set, even if your evidence drive is damaged, or if the data in the image gets corrupt over time: only one the hash for the damaged segment of the drive becomes invalid.<\/p>\r\n\r\n\r\n\r\n

Segmented hashing produces a CSV file in this format:<\/p>\r\n\r\n\r\n\r\n

Hash,start LBA,end LBA<\/em><\/p>\r\n\r\n\r\n\r\n

 <\/p>\r\n\r\n\r\n\r\n

\"\"\r\n
A table with segmented hashes: hash value, first LBA, last LBA<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

Imaging with segmented hashing and post-hashing of the target for immediate image verification<\/h3>\r\n\r\n\r\n\r\n

In the imaging settings, select Segmented hashing method and sector size: you can select size from a range of options (4 to 32 GB).<\/p>\r\n\r\n\r\n\r\n

Make sure to enable post-hash of the target and receive both sets of hashes for both the evidence drive and image.<\/p>\r\n\r\n\r\n\r\n

\"\"\r\n
Atola TaskForce: selecting hashing method<\/figcaption>\r\n<\/figure>\r\n\r\n

TaskForce’s highly optimized imaging and hashing algorithms ensure that hashing during imaging does not slow down the session:<\/span><\/p>\r\n\r\n

\"\"\r\n
Task Force: imaging session<\/figcaption>\r\n<\/figure>\r\n\r\n

After imaging is completed, post-hashing will commence.<\/span><\/p>\r\n\r\n

\"\"\r\n
Atola TaskForce: Post-hashing<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

Here are imaging results with the link to the file with segmented hashes. With the post-hashing of the target is enabled, you also receive the results of cross-checking between the hash sets of the evidence drive and the image.<\/p>\r\n\r\n\r\n\r\n

\"\"\r\n
Atola TaskForce: Imaging results<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n

Is there any disadvantage compared to linear hashing?<\/h4>\r\n\r\n\r\n\r\n

The only potential downside of segmented hashing is the lack of its support in third-party tools. To make verification of segmented hashes easy, we have developed and released a free open-source tool for the validation of segmented hashes:\u00a0seghash on GitHub<\/a>.<\/p>\r\n\r\n

<\/p>","protected":false},"excerpt":{"rendered":"

Segmented hashing allows verifying data imaged from damaged media and ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.<\/p>\n","protected":false},"author":8,"featured_media":3964,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45],"tags":[],"yoast_head":"\nAtola TaskForce: using segmented hashing for data verification<\/title>\n<meta name=\"description\" content=\"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atola.com\/blog\/atola-taskforce-data-verification\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Atola TaskForce: using segmented hashing for data verification\" \/>\n<meta property=\"og:description\" content=\"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AtolaTechnology\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-03T12:53:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-10-26T13:08:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.atola.com\/wp-content\/uploads\/2020\/04\/4session-complete.png\" \/>\n\t<meta property=\"og:image:width\" content=\"3840\" \/>\n\t<meta property=\"og:image:height\" content=\"3090\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Yulia Samoteykina\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:site\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yulia Samoteykina\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\"},\"author\":{\"name\":\"Yulia Samoteykina\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\"},\"headline\":\"Using segmented hashing in Atola TaskForce for data verification\",\"datePublished\":\"2020-04-03T12:53:13+00:00\",\"dateModified\":\"2022-10-26T13:08:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\"},\"wordCount\":401,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png\",\"articleSection\":[\"Atola TaskForce\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\",\"url\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\",\"name\":\"Atola TaskForce: using segmented hashing for data verification\",\"isPartOf\":{\"@id\":\"https:\/\/atola.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png\",\"datePublished\":\"2020-04-03T12:53:13+00:00\",\"dateModified\":\"2022-10-26T13:08:36+00:00\",\"description\":\"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png\",\"width\":3840,\"height\":3090,\"caption\":\"Imaging results\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/atola.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using segmented hashing in Atola TaskForce for data verification\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/atola.com\/blog\/#website\",\"url\":\"https:\/\/atola.com\/blog\/\",\"name\":\"Atola Blog\",\"description\":\"Atola Blog\",\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/atola.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/atola.com\/blog\/#organization\",\"name\":\"Atola Technology\",\"url\":\"https:\/\/atola.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"width\":840,\"height\":689,\"caption\":\"Atola Technology\"},\"image\":{\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/AtolaTechnology\",\"https:\/\/x.com\/atola_insight\",\"https:\/\/ua.linkedin.com\/company\/atola-technology\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\",\"name\":\"Yulia Samoteykina\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"caption\":\"Yulia Samoteykina\"},\"description\":\"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.\",\"url\":\"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Atola TaskForce: using segmented hashing for data verification","description":"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atola.com\/blog\/atola-taskforce-data-verification\/","og_locale":"en_US","og_type":"article","og_title":"Atola TaskForce: using segmented hashing for data verification","og_description":"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.","og_url":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/","article_publisher":"https:\/\/www.facebook.com\/AtolaTechnology","article_published_time":"2020-04-03T12:53:13+00:00","article_modified_time":"2022-10-26T13:08:36+00:00","og_image":[{"width":3840,"height":3090,"url":"https:\/\/blog.atola.com\/wp-content\/uploads\/2020\/04\/4session-complete.png","type":"image\/png"}],"author":"Yulia Samoteykina","twitter_card":"summary_large_image","twitter_creator":"@atola_insight","twitter_site":"@atola_insight","twitter_misc":{"Written by":"Yulia Samoteykina","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#article","isPartOf":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/"},"author":{"name":"Yulia Samoteykina","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820"},"headline":"Using segmented hashing in Atola TaskForce for data verification","datePublished":"2020-04-03T12:53:13+00:00","dateModified":"2022-10-26T13:08:36+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/"},"wordCount":401,"commentCount":0,"publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"image":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png","articleSection":["Atola TaskForce"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/","url":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/","name":"Atola TaskForce: using segmented hashing for data verification","isPartOf":{"@id":"https:\/\/atola.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage"},"image":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png","datePublished":"2020-04-03T12:53:13+00:00","dateModified":"2022-10-26T13:08:36+00:00","description":"Segmented hashing is a concept introduced into forensic imaging by Atola Technology. This method allows verifying data imaged from damaged media, ensuring that the image can be verified even if data gets corrupt later in the case\u2019s life cycle.","breadcrumb":{"@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.atola.com\/atola-taskforce-data-verification\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#primaryimage","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2020\/04\/4session-complete.png","width":3840,"height":3090,"caption":"Imaging results"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.atola.com\/atola-taskforce-data-verification\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atola.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Using segmented hashing in Atola TaskForce for data verification"}]},{"@type":"WebSite","@id":"https:\/\/atola.com\/blog\/#website","url":"https:\/\/atola.com\/blog\/","name":"Atola Blog","description":"Atola Blog","publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atola.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atola.com\/blog\/#organization","name":"Atola Technology","url":"https:\/\/atola.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","width":840,"height":689,"caption":"Atola Technology"},"image":{"@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AtolaTechnology","https:\/\/x.com\/atola_insight","https:\/\/ua.linkedin.com\/company\/atola-technology"]},{"@type":"Person","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820","name":"Yulia Samoteykina","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","caption":"Yulia Samoteykina"},"description":"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.","url":"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/"}]}},"_links":{"self":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3937"}],"collection":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/comments?post=3937"}],"version-history":[{"count":1,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3937\/revisions"}],"predecessor-version":[{"id":6674,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/3937\/revisions\/6674"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media\/3964"}],"wp:attachment":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media?parent=3937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/categories?post=3937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/tags?post=3937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}