dcfldd

Enhanced version of dd for forensics and security. More information: <http://dcfldd.sourceforge.net/>.

Install

All systems
curl cmd.cat/dcfldd.sh
Debian Debian
apt-get install dcfldd
Ubuntu
apt-get install dcfldd
Arch Arch Linux
pacman -S dcfldd
image/svg+xml Kali Linux
apt-get install dcfldd
Fedora
dnf install dcfldd
Windows (WSL2)
sudo apt-get update sudo apt-get install dcfldd
OS X
brew install dcfldd
Raspbian
apt-get install dcfldd
Dockerfile
dockerfile.run/dcfldd

Enhanced version of dd for forensics and security. More information: <http://dcfldd.sourceforge.net/>.

  • Copy a disk to a raw image file and hash the image using SHA256:
    dcfldd if=/dev/disk_device of=file.img hash=sha256 hashlog=file.hash
  • Copy a disk to a raw image file, hashing each 1 GB chunk:
    dcfldd if=/dev/disk_device of=file.img hash=sha512|sha384|sha256|sha1|md5 hashlog=file.hash hashwindow=1G

© tl;dr; authors and contributors