resurrecting-open-source-projects / dcfldd

Licence: GPL-2.0 License
Enhanced version of dd for forensics and security

Programming Languages

c
50402 projects - #5 most used programming language
Makefile
30231 projects

Projects that are alternatives of or similar to dcfldd

Palmprint-Recognition-in-the-Wild
No description or website provided.
Stars: ✭ 22 (-18.52%)
Mutual labels:  forensics, forensic-analysis, forensics-investigations
Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
Stars: ✭ 66 (+144.44%)
Mutual labels:  forensics, forensic-analysis, forensics-investigations
ForensicsTools
A list of free and open forensics analysis tools and other resources
Stars: ✭ 392 (+1351.85%)
Mutual labels:  forensics, forensic-analysis, forensics-investigations
pyaff4
The Python implementation of the AFF4 standard.
Stars: ✭ 37 (+37.04%)
Mutual labels:  forensics, forensic-analysis
lsrootkit
Rootkit Detector for UNIX
Stars: ✭ 53 (+96.3%)
Mutual labels:  forensics, forensic-analysis
Packrat
Live system forensic collector
Stars: ✭ 16 (-40.74%)
Mutual labels:  forensics, forensics-investigations
vminspect
Tools for inspecting disk images
Stars: ✭ 25 (-7.41%)
Mutual labels:  forensics, forensic-analysis
btrfscue
Recover files from damaged BTRFS filesystems
Stars: ✭ 28 (+3.7%)
Mutual labels:  forensics, forensic-analysis
ingest-file
Ingestors extract the contents of mixed unstructured documents into structured (followthemoney) data.
Stars: ✭ 40 (+48.15%)
Mutual labels:  forensics, forensics-investigations
hashlookup-forensic-analyser
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
Stars: ✭ 43 (+59.26%)
Mutual labels:  forensic-analysis, forensics-investigations
robot hacking manual
Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups from a journey into robot cybersecurity.
Stars: ✭ 169 (+525.93%)
Mutual labels:  forensics
CTF-Script-And-Template-Thrift-Shop
[180+ scripts] There are a few genuine gems in there. And a lot of spaghetti code. Most of these scripts were for solving CTF's. If you googles something for a CTF and landed here look at the scripts they're all fairly malleable. Sorry for the shitty naming conventions (not really). If you are a recruiter stop. I wont be able to rewrite half thi…
Stars: ✭ 38 (+40.74%)
Mutual labels:  forensics
macOS-triage
macOS triage is a python script to collect various macOS logs, artifacts, and other data.
Stars: ✭ 20 (-25.93%)
Mutual labels:  forensics
mini-kali
Docker image for hacking
Stars: ✭ 15 (-44.44%)
Mutual labels:  forensics
LevelDBDumper
Dumps all of the Key/Value pairs from a LevelDB database
Stars: ✭ 23 (-14.81%)
Mutual labels:  forensics
MacForensics
Scripts to process macOS forensic artifacts
Stars: ✭ 118 (+337.04%)
Mutual labels:  forensics
smram parse
System Management RAM analysis tool
Stars: ✭ 50 (+85.19%)
Mutual labels:  forensics
git-forensics-plugin
Jenkins plug-in that mines and analyzes data from a Git repository
Stars: ✭ 19 (-29.63%)
Mutual labels:  forensics
sift-saltstack
Salt States for Configuring the SIFT Workstation
Stars: ✭ 82 (+203.7%)
Mutual labels:  forensics
truehunter
Truehunter
Stars: ✭ 30 (+11.11%)
Mutual labels:  forensics

dcfldd

dcfldd - enhanced version of dd for forensics and security

Help this project

dcfldd needs your help. If you are a programmer and if you wants to help a nice project, this is your opportunity.

dcfldd was imported from some tarballs (the original homepage1 and developers are inactive). After this, all patches found in Debian project and other places for this program were applied. All initial work was registered in ChangeLog file (version 1.5 and later releases). dcfldd is being packaged in Debian2 Project.

If you are interested to help dcfldd, read the CONTRIBUTING.md file.

What is dcfldd?

dcfldd is a modified version of GNU dd. The major features added are:

  • Hashing on-the-fly: dcfldd can hash the input data as it is being transferred, helping to ensure data integrity.
  • Status output: dcfldd can update the user of its progress in terms of the amount of data transferred and how much longer operation will take.
  • Flexible disk wipes: dcfldd can be used to wipe disks quickly and with a known pattern if desired.
  • Image/wipe verify: dcfldd can verify that a target drive is a bit-for-bit match of the specified input file or pattern.
  • Multiple outputs: dcfldd can output to multiple files or disks at the same time.
  • Split output: dcfldd can split output to multiple files with more configurability than the split command.
  • Piped output and logs: dcfldd can send all its log data and output to commands as well as files natively.

dcfldd was originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory (DCFL). Nick Harbour still maintaining the package, although he was no longer affiliated with the DCFL.

Nowadays, dcfldd is maintained by volunteers.

Build and Install

To build and install, run the following commands:

$ ./autogen.sh
$ ./configure
$ make
# make install

To return to original source code you can use '$ make distclean' command.

On Debian systems you can use '# apt install dcfldd'.

There is a bash completion file inside doc/ directory in source code.

Author

dcfldd was originally developed by Nicholas Harbour under GPL-2+ license.

Currently, the source code and newer versions are available at https://github.com/resurrecting-open-source-projects/dcfldd

See AUTHORS file for more information.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].