rdd – forensic copy software

rdd is a forensic copy program developed at and used by the Netherlands Forensic Institute (NFI).

Specifically, rdd is a file and device copying utility that includes features that are useful in a forensic environment. In particular, rdd can compute cryptographic hashes over the data it copies, which is an important property in a forensic operating environment. The software is also robust with respect to read errors, and can copy data across a network.

rdd can be run in local mode, in client mode, and in server mode.

Features include:

  • Checksumming (Adler32 and CRC32) – computes an MD5 or a SHA1 hash value over the input bytes and the zero bytes it substitutes for blocks it cannot read.
  • Access the device using the raw device.
  • Designed to handle unfriendly source media.

Website: sourceforge.net/projects/rdd
Support:
Developer: Raoul A.F. Bhoedjang and contributors
License: Open Source

rdd

rdd is written in C. Learn C with our recommended free books and free tutorials.

Return to Digital Forensics Home Page

Read our complete collection of recommended free and open source software. The collection covers all categories of software.
Share this article

Share your Thoughts

This site uses Akismet to reduce spam. Learn how your comment data is processed.