Investigating Synology RAID: Reassembly & Logical Imaging With Atola TaskForce 2

Author: Forensic Focus: Digital Forensics & DFIR - Bewertung: 0x - Views:1206

This video demonstrates how digital forensic investigators can quickly reconstruct a proprietary Synology RAID, browse the file system before imaging, and perform targeted logical imaging instead of acquiring the entire multi-terabyte array.



In this video, TaskForce 2:



- Automatically detects Synology SHR and SHR-2 configurations



- Reconstructs RAID with no manual setup



- Lets you browse evidence before imaging



- Creates logical image of selected files and folders



- Recovers data from missing or damaged drives using RAID parity



If you're working with a NAS holding many terabytes of data and you just need a few key files, this workflow gets you there faster – without cutting corners on integrity.



⏱️ Timestamps



00:00 Intro

00:15 The problem with Synology RAID reassembly

01:10 How standard RAID works

01:20 What is Synology SHR

03:31 TaskForce 2: built for Synology RAID

03:35 Step 1: Connect sources

03:58 Step 2: RAID autodetection

03:50 Step 3: Review before imaging

04:23 Step 4: Logical imaging

05:01 Step 5: Missing/damaged RAID recovery



📝Resources:



🔗 Learn more about Atola TaskForce 2 RAID capabilities: https://atola.com/products/taskforce/forensic-raid-image.html



🔗 Follow Atola on LinkedIn: https://www.linkedin.com/company/atola-technology/