Dcfldd

From Forensics Wiki
Revision as of 08:36, 25 March 2006 by Uwe Hermann (Talk | contribs)

Jump to: navigation, search

dcfldd is an enhanced version of GNU dd. It has some useful features for forensic investigators:

  • On-the-fly hashing of the transmitted data.
  • Progress bar of how much data has already been sent.
  • Wiping of disks with known patterns.
  • Verification that the image is identical to the original drive, bit-for-bit.
  • Simultaneous output to more than one file/disk is possible.
  • The output can be splitted into multiple files.
  • Logs and data can be piped into external applications.

Example

External Links