Atola TaskForce 2

The Atola TaskForce 2 is a top-performance evidence acquisition tool capable of working with both good and damaged media, developed to suit the needs of modern forensic labs. With 26 ports, TaskForce 2 supports direct imaging of SATA, SAS/SATA, NVMe M.2/U.2 PCIe 4.0, USB and IDE as well as Apple PCIe and Thunderbolt storage devices via Atola extension modules. Device racks for convenient and secure drive organization.

TaskForce 2 can be operated either in standalone mode or by multiple users from any number of devices within the same local network. The built-in 10 Gb Ethernet connections ensure fast network access for device control and imaging.

The system consists of TaskForce 2 hardware unit and software accessible in Google Chrome browser.

TaskForce Web API integrates workflow automation of forensic acquisitions and the start of artifact analysis by software like Magnet AXIOM, X-Ways, Autopsy, etc. Express Mode streamlines acquisitions involving multiple drives by automatically launching up to 25 simultaneous imaging sessions based on predefined parameters.

25+ simultaneous imaging sessions

Atola TaskForce 2 combines vast multitasking capabilities with the fastest imaging engine in the forensic market thanks to its server-grade motherboard, 16-thread Xeon CPU (3.7 GHz clock speed) and 16 GB ECC RAM.

• 25+ imaging sessions in parallel (plus other tasks)
• 25 TB/hour cumulative speed of imaging
• Imaging of 500+ MB/sec on SSDs, 4 GB/sec on NVMe
• 2 x 10 Gb Ethernet ports
• Source/target switch on all ports for maximum flexibility
• Write protection in Source mode on all ports
• Integration with workflow automation tools via Web API
• Pause and resume any imaging session
• Forensic Imaging to up to 5 targets including E01, L01, Raw and AFF4 files
• Express Mode (automatically launch up to 25 imaging sessions in parallel)
• Logical imaging module with smart filters for files and folders, date and size ranges to save time and target space

Damaged drives support

Hard drives with physical damage and problematic solid-state drives require a complex imaging approach. Atola TaskForce 2's data recovery engine is fully automated and is designed to efficiently acquire maximum data while avoiding further deterioration of the media.

• In-depth drive diagnostics
• Automated data recovery with a multi-pass imaging algorithm
• Selective head imaging
• Automatic reset of freezing drives
• Current sensors on all SATA, SAS/SATA, IDE ports
• Overcurrent and short-circuit protection on all ports
• Segmented hashing for damaged drive image verification

RAID support

• Reassemble RAID 0, 1, 5, 6, 10, and JBOD
• Rebuild RAID 5 with a missing or damaged drive
• Rebuild RAID 6 with two missing or damaged drives
• Preview RAID contents.  Image the whole array or select partitions, folders, and files
  

Server rack-mountable

TaskForce 2 is designed primarily for in-lab usage and can be mounted into a standard server rack, along with one or two Atola Device Racks. The size of the rackmount for both TaskForce 2 and Atola Device Rack is 3u