https://github.com/adulau/dcfldd

dcfldd - enhanced version of dd for forensics and security
https://github.com/adulau/dcfldd

acquisition dfir disk-image forensics incident-response

Last synced: 25 days ago
JSON representation

dcfldd - enhanced version of dd for forensics and security

• Host: GitHub
• URL: https://github.com/adulau/dcfldd
• Owner: adulau
• License: gpl-2.0
• Created: 2013-02-23T09:19:15.000Z (almost 12 years ago)
• Default Branch: master
• Last Pushed: 2018-06-17T08:42:57.000Z (over 6 years ago)
• Last Synced: 2024-08-28T18:14:38.630Z (4 months ago)
• Topics: acquisition, dfir, disk-image, forensics, incident-response
• Language: C
• Homepage: http://adulau.github.com/dcfldd/
• Size: 197 KB
• Stars: 68
• Watchers: 5
• Forks: 6
• Open Issues: 2
• Metadata Files:
  • Readme: README
  • Changelog: ChangeLog
  • License: COPYING

Awesome Lists containing this project

README

        
dcfldd

======

dcfldd is a modified version of GNU dd.  The major features added

are hashing, fast disk wiping (through patterns) and status output.

dcfldd was originally created by Nicholas Harbour from the

DoD Computer Forensics Laboratory (DCFL).  Nick Harbour still maintains

the package, although he is no longer affiliated with the DCFL.

Send any feature requests or ideas to the author at

.

dcfldd on GitHub

----------------

On https://github.com/adulau/dcfldd/, this is the latest version of

http://dcfldd.sourceforge.net/ (1.3.4-1) including Debian patches and

some additional patches from Alexandre Dulaunoy https://github.com/adulau.

dcfldd usage

------------

    dcfldd if=/dev/sda hash=md5,sha256 hashwindow=20G md5log=md5.txt sha256log=sha256.txt \

           hashconv=after bs=512 conv=noerror,sync split=20G splitformat=aa of=sda.dd