Image 25+ drives simultaneously at 25 TB per hour.
Automatically reassemble and image RAIDs.
Acquire data even from damaged drives.
Get the full power of the server-grade hardware and two 10 Gbit network ports.
26 ports to maximize imaging capacity
Image dozens of individual evidence devices, automatically reassemble RAIDs with an unknown configuration consisting of an unlimited number of members (drives and/or images), or securely wipe a whole bunch of drives for future use – all at once, at top native speeds.
To simultaneously image 25+ evidence devices and run other forensic tasks at 25 TB/hour, TaskForce 2 is equipped with 26 ports of all popular types
4 NVMe M.2/U.2 PCIe 4.0
1 Extension slot for pluggable M.2 SSD, Apple PCIe SSD, Thunderbolt extension modules
All respective drive interfaces are supported: M.2 / U.2 NVMe, SATA I/II/III, SAS3 (12 Gb), USB 2.0/3.x, IDE. Flash cards are supported via a USB card reader.
16 ports for SATA drives
TaskForce 2 has eight SATA ports and eight SAS/SATA ports.
Plug in up to 16 SATA drives and image them in parallel to a network server
through two superfast 10 Gbit Ethernet ports.
Four M.2/U.2 ports for NVMe drives
To help you with the ever-growing number of NVMe M.2 drives in forensic cases, TaskForce 2 has four M.2/U.2 ports:
PCIe 4.0 interface
Support for both M.2 and U.2 drives.
Fast & convenient hot-swap of drives.
With M.2 extension connected to the extensions slot, you can image 5 NVMe drives simultaneously.
Clear indication for maximum control
At a glance, get an instant understanding of what’s happening with TaskForce 2
and your tasks thanks to LED status indicators on the front panel.
Power LED indicator
Signals that hardware is up and running.
Color-coded port LEDs
Indicate that a task is running or finished, a process is OK or there are issues.
Shows an IP address to connect to the TaskForce 2 user interface or Kiosk mode.
Configurable hardware write protection
Configure all 26 ports according to your needs, as each of them can be set either to the source or target mode.
The source mode turns on hardware write protection to eliminate any possibility of altering your digital evidence.
A dedicated LED indicator next to each port signals that the source mode on this particular port is enabled.
To use a drive as an imaging target, alter or securely erase its contents, switch its port to a target mode.
25+ parallel imaging sessions
Image at 25 TB/hour cumulative speed when running 25+ simultaneous sessions at the top native speeds of the drives. Image to the network via two 10 Gbit Ethernet ports, to another drive, or a forensic file on an encrypted storage drive.
Copy every single bit of an evidence drive or use smart filters to image only selected partitions, folders, or files. Pause an imaging session and resume it later.
RAID: automated detection and reassembly
Automatically identify unknown configurations of RAID arrays.
Preview RAID contents. Image the whole array or only selected partitions, folders, and files.
Streamline and automate your workflow with Express mode and Web API.
Autostart up to 25 imaging sessions in parallel.
Specify the destination and imaging settings for the Express mode only once.
Then, simply plug in the drives one by one and watch the sessions start automatically with predefined parameters.
Integrate drive imaging into an automated evidence processing sequence, and reduce downtime between its stages using the built-in Web API.
Use API requests in scripts, via command-line interface tools, or by typing commands in the browser address bar.
Damaged drives support
Maximize data acquisition
Use a preset for bad drives to apply a multi-pass imaging algorithm.
Fine-tune the imaging process for the toughest cases: apply reverse direction, manage block sizes and timeouts.
Monitor the drive’s condition
Base your imaging strategy on diagnostics reports.
Track changes in a drive’s health using the SMART table.
Prevent drive damage
Protect drives from short circuits.
Handle freezing drives automatically.
Image data from the good heads only.
Disable the read look-ahead mode.
Ensure data integrity
Use segmented hashing during the imaging of damaged drives.
Save time and resources by acquiring only selected partitions, folders, and files in a forensically sound manner.
Use smart built-in filters to narrow your selection.
Get an image file in the forensic L01 format with MD5/SHA1 hashes calculated during the imaging process. Compress it if needed.
Save an image file in a network folder or on a storage drive.
Pause an acquisition process and resume it later.
Team access and user interface
Control the user-friendly interface of TaskForce 2 in the Chrome browser on any device: a computer, tablet, or phone.
Collaborate as a team using a single hardware unit to perform all acquisition tasks simultaneously.
Create user profiles and protect them with passwords to keep each user’s processes, reports, and cases separate and confidential.
Three ways to manage TaskForce 2
Each forensic lab is different. Choose an option that suits your workflow best.
10 Gb Ethernet
Access TaskForce 2 from any device within the same local network using the IP address displayed on the front panel.
Use either dynamic or static IP addresses. Benefit from two 10 Gbit Ethernet ports.
Use HTTPS for extra protection. Configure DNS nameserver, default gateway, and Jumbo frames.
Use TaskForce without a network connection in the Kiosk mode by plugging in a VGA monitor, keyboard, and mouse.
Once a monitor is plugged in, it displays the Taskforce user interface, and you can operate the system using a keyboard and mouse.
Access TaskForce 2 via an external Wi-Fi adapter. Connect from a computer, tablet, or phone. Use the whole TaskForce 2 functionality without any limitations.