rdd is a forensic copy program developed at and used by the
Netherlands Forensic Institute (NFI).
Specifically, rdd is a file and device copying utility that
includes features that are useful in a forensic environment. In
particular, rdd can compute cryptographic hashes over the data it
copies, which is an important property in a forensic operating
environment. The software is also robust with respect to read errors,
copy data across a network.
rdd can be run in local mode, in client mode, and in server
- Checksumming (Adler32 and CRC32) - computes an MD5 or a
SHA1 hash value over the input bytes and the zero bytes it substitutes
for blocks it cannot read
- Access the device using the raw device
- Designed to handle unfriendly source media
to Digital Forensics Home Page
Last Updated Saturday, December 20 2014 @ 08:29 AM EST