TaskForce's case management system records every step of the data acquisition process: every operation is automatically added to the case from the moment a device is identified including date, time, imaging map and hash values. When a hard drive is imaged, its imaging map is recorded detailing all the sectors that have been skipped.
Whenever an operator connects a hard drive to the TaskForce, the system makes an automatic database lookup and retrieves all past records associated with that particular hard drive. New entries will be added seamlessly to the database. You do not need to enable case management or take any additional actions for it to start functioning; it is fully embedded into Atola TaskForce and works at all times.
Case number can be assigned and changed at any time. The system also allows browsing through all cases and reports, without corresponding devices being connected to the unit.
There are two types of reports in TaskForce:
All reports have these key elements: a header that provides device and case details, an action summary and task details (task settings, task log, etc.).
A diagnostics report contains even more details: it lists the checkup results for all subsystems of a drive and includes oscillograms, SMART table, etc.
The reports that have been imported to TaskForce's case management system from Atola Insight Forensic, are easily identifiable due to the differences in the interface of the two tools.