2020-01-06 16:32:45 +00:00
|
|
|
# dcfldd
|
|
|
|
|
|
|
|
|
|
> Enhanced version of dd for forensics and security.
|
|
|
|
|
> More information: <http://dcfldd.sourceforge.net/>.
|
|
|
|
|
|
|
|
|
|
- Copy a disk to a raw image file and hash the image using SHA256:
|
|
|
|
|
|
|
|
|
|
`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}`
|
|
|
|
|
|
|
|
|
|
- Copy a disk to a raw image file, hashing each 1GB chunk:
|
|
|
|
|
|
2020-01-14 22:02:10 +00:00
|
|
|
`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash={{sha512|sha384|sha256|sha1|md5}} hashlog={{file.hash}} hashwindow={{1G}}`
|
