dcfldd Logo

dcfldd

0
Free
Visit Website

dcfldd is a modified version of GNU dd with added features such as hashing, fast disk wiping, and status output. Originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory (DCFL), it is now maintained by him independently. The latest version can be found on GitHub at https://github.com/adulau/dcfldd/, which includes Debian patches and additional patches from Alexandre Dulaunoy.

FEATURES

ALTERNATIVES

ForensicMiner, Redefine DFIR Automations

A collaborative forensic timeline analysis tool for organizing and analyzing data with rich annotations and comments.

iOS Mobile Backup Xtractor tool for extracting iOS backups.

XMLStarlet offers a suite of command line utilities for manipulating and querying XML documents.

OSXCollector is a forensic evidence collection & analysis toolkit for OSX.

A toolkit for forensic analysis of network appliances with YARA decoding options and frame extraction capabilities.

A repository containing material from a talk on sub-domain enumeration techniques

Collects and organizes Linux OS data for detailed analysis and incident response.