dcfldd: add page (#3719)

2020-01-06 17:32:45 +01:00 · 2020-01-06 17:32:45 +01:00 · df2826e26f
parent 470216d54b
commit df2826e26f
1 changed files with 12 additions and 0 deletions
--- a/pages/common/dcfldd.md
+++ b/pages/common/dcfldd.md
@ -0,0 +1,12 @@
+# dcfldd
+
+> Enhanced version of dd for forensics and security.
+> More information: <http://dcfldd.sourceforge.net/>.
+
+- Copy a disk to a raw image file and hash the image using SHA256:
+
+`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}`
+
+- Copy a disk to a raw image file, hashing each 1GB chunk:
+
+`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash={{hash_algorithm}} hashlog={{file.hash}} hashwindow={{1G}}`