snippetbashTip

dcfldd — Enhanced version of dd for forensics and security. More information: <https://manned.org/dcfldd>.

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

dcflddforensicscommandenhancedandcliforversion

Problem

How to use the dcfldd command: Enhanced version of dd for forensics and security. More information: <https://manned.org/dcfldd>.

Solution

dcfldd — Enhanced version of dd for forensics and security. More information: <https://manned.org/dcfldd>.

Copy a disk to a raw image file and hash the image using SHA256:

dcfldd if={{/dev/disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}

Copy a disk to a raw image file, hashing each 1 GB chunk:

dcfldd if={{/dev/disk_device}} of={{file.img}} hash={{sha512|sha384|sha256|sha1|md5}} hashlog={{file.hash}} hashwindow={{1G}}

Code Snippets

Copy a disk to a raw image file and hash the image using SHA256

dcfldd if={{/dev/disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}

Copy a disk to a raw image file, hashing each 1 GB chunk

dcfldd if={{/dev/disk_device}} of={{file.img}} hash={{sha512|sha384|sha256|sha1|md5}} hashlog={{file.hash}} hashwindow={{1G}}

Context

tldr-pages: common/dcfldd

Revisions (0)

No revisions yet.