dcfldd is an enhanced version of dd with features useful for forensics and security.
dd copies a file (from standard input to standard output, by default) converting and formatting according to the options supplied.
This utility only generates raw image files.
Key Features
- Useful features for forensic investigators:
- Hashing on-the-fly, dcfldd can hash the input data as it is being transferred, helping to ensure data integrity. Supports multiple hashes at once.
- Progress bar of how much data has already been sent.
- Flexible disk wipes, dcfldd can be used to wipe disks quickly and with a known pattern if desired.
- Image/wipe Verify, dcfldd can verify that a target drive is a bit-for-bit match of the specified input file or pattern.
- Simultaneous output to more than one file/disk is possible.
- Split output, dcfldd can split output to multiple files with more configurability than the split command.
- Piped output and logs, dcfldd can send all its log data and output to commands as well as files natively.
- Verify capability.
Website: dcfldd.sourceforge.net
Support:
Developer: Nicholas Harbour
License: GNU General Public License v2.0
dcfldd is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| Digital Forensics Tools | |
|---|---|
| GRR Rapid Response | Remote live forensics for incident response |
| Radare2 | Portable reversing framework |
| The Sleuth Kit | Collection of tools for forensic analysis |
| MemProcFS | View physical memory as files in a virtual file system |
| Autopsy Forensic Browser | Graphical interface to SleuthKit |
| iaito | Official graphical interface for radare2 |
| Chainsaw | Fast forensic triage and threat hunting tool for Windows artefacts |
| Velociraptor | Endpoint visibility and collection tool |
| Timesketch | Collaborative forensic timeline analysis |
| Plaso | Python-based digital forensics framework |
| Volatility | Advanced memory forensics framework |
| UAC | Collect forensic artefacts from Linux and other Unix-like systems |
| IPED | Process, index and analyse large collections of digital evidence |
| guymager | Forensic imaging tool based on Qt |
| Dissect | Access and query evidence across disk images and file systems |
| dcfldd | Enhanced version of dd for forensics and security |
| rdd | Forensic copy program |
| Jomon | Network forensics and passive sniffer |
| Mozilla InvestiGator | Real-time digital forensics and investigation platform |
Read our verdict in the software roundup.
| Alternatives to dd | |
|---|---|
| ddrescue | Data recovery tool |
| dcfldd | Enhanced version of dd |
| dd_rescue | Data recovery and data protection tool |
| ddi | Wrapper for dd |
| ddrescueview | GUI front-end for ddrescue |
Read our verdict in the software roundup.
| Disk Cloning Software | |
|---|---|
| GParted | Industrial-strength package for partition editing |
| Clonezilla | Perform system deployment, bare metal backup and recovery |
| Rescuezilla | Easy Backup, Recovery & Bare Metal Restore |
| FOG | A cloning / imaging solution / rescue suite |
| G4L | ncurses-based hard disk and partition imaging and cloning tool |
| Mondo Rescue | Reliable, disaster recovery solution |
| FSArchiver | Save the contents of a filesystem to a compressed archive file |
| PING | Partimage Is Not Ghost |
| OpenSuperClone | Powerful data recovery utility for Linux |
| Partclone | Save and restore used blocks on a partition |
| Redo Rescue | Simple backup and recovery solution |
| Foxclone | Image backup, restore and clone tool |
| qt-fsarchiver | Frontend for fsarchiver to save/restore partitions, folders and MBR/GPT |
| Partimage | Stores partitions to a image file |
| dcfldd | Enhanced version of dd |
| Apart GTK | Partclone GUI |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.