Atola TaskForce

Atola TaskForce is a high-performance forensic imager capable of working with both good and damaged media.

It supports SAS, SATA, USB and IDE drives via 18 ports, and other storage devices via Thunderbolt, Apple PCIe, and M.2 SSD extension modules.

TaskForce is equipped with RAID autodetection module allowing it to reassemble and image RAID arrays with unknown configurations.

The forensic imager consists of a hardware unit and software accessible in Google Chrome browser.

It can be operated either in standalone mode or by multiple users within the same local network.

TaskForce Web API enables automation of forensic imaging and subsequent start of evidence analysis with software like Magnet AXIOM, X-Ways, Autopsy, etc.

We stand behind our product. If the hardware unit malfunctions, it's covered by our Lifetime warranty for as long as your subscription is active.
The subscription includes 2-3 software updates in a year.

12+ simultaneous imaging sessions

RAID configuration autodetection and imaging

TaskForce's fine-tuned RAID autodetection algorithms allow reassembling RAID arrays with an unknown configuration:

• RAID identification by data parcing on connected drives and/or image files
• RAID types: RAID 0, 1, 5, 10 and JBOD
• File systems: NTFS, ext4/3/2, XFS, exFAT, HFS/HFS+, FAT32/16
• Instant identification of mdadm-created RAID
• One-click application of a suggested configuration
• Partition preview
• Rebuild of RAID with a missing or damaged device (for certain types of redundancy-enabled RAID)
• Max number of auto-checked RAID configurations: 100,000,000

A RAID array can be imaged in its entirety or by individual partitions.

Damaged drive support

Physically damaged hard drives and problematic solid-state drives require a complex imaging approach. TaskForce forensic imager is designed to achieve the best results getting as much data as possible. It includes the following features:

• Imaging data from good heads only
• Imaging freezing drives
• Imaging drives with surface scratches and firmware issues
• In-depth drive diagnostics
• Pause/resume an imaging sessions, optimizing the settings to retrieve more data
• Current sensor on all SATA, SAS/SATA, IDE ports
• Automatic overcurrent and short-circuit protection

TaskForce hardware is equipped with full circuit protection to prevent a malfunctioning storage device connected to the unit causing damage to the system or to itself.

Multi-user access from any device

TaskForce user interface is highly intuitive, task-oriented. It is designed to facilitate work with evidence for investigators with different levels of technical proficiency.

UI features are:

• Operating the unit via Chrome browser
• Simultaneous operation by multiple users
• Launching any operation within a couple of clicks or taps
• Highly intuitive task-oriented user interface

Three ways to manage TaskForce

TaskForce can be operated in the lab or in the field using one of these connectivity options:

1. 10Gb Ethernet network

TaskForce allows access from any device within the same local network by entering the IP address in Google Chrome. To simplify connectivity, the IP address is displayed on the small screen in the front panel.

Supported network features:

• Two 10 Gbit Ethernet ports
• Dynamic (DHCP) IP / Static IP address
• Settings: DNS nameserver, Default gateway, Jumbo frames
• Secure connection with password-protected network folders
• DFS (Distributed File System) support
• Support of HTTPS with external organizational and self-signed certificates

2. Standalone mode

The system's compact size (see Hardware specs) combined with standalone mode makes it great for in-the-field work. Beautiful built-in TaskForce touch screen is always at hand. No other computers need to be involved.

3. Remote Wi-Fi connection

TaskForce can be supplemented with a WiFi 802.11n 150 Mb/s adapter in access point mode for easy connection. When you enable WiFi, it sets up a secure network available for remote control via laptop, tablet or smartphone.

Other features of TaskForce forensic imager

• Wiping with various methods: Pattern, Secure Erase, NIST 800-88, DoD 5220.22-M, Random, LBA number
• Browse files on any connected device
• SMART viewing + recording it before and after image acquisition
• Hash calculation (linear and segmented): MD5, SHA1, SHA256, SHA512
• HPA & DCO control and recovery
• Automatic report generation
• Case management system