Copy Disk Image - Forensics with dcfldd | Online Free DevTools by Hexmos
Copy disk image with dcfldd, an enhanced dd command for forensics. Securely acquire data and generate cryptographic hashes for integrity verification. Free online tool, no registration required.
dcfldd
Enhanced version of dd for forensics and security. More information: https://manned.org/dcfldd.
- Copy a disk to a raw image file and hash the image using SHA256:
dcfldd if={{/dev/disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}
- Copy a disk to a raw image file, hashing each 1 GB chunk:
dcfldd if={{/dev/disk_device}} of={{file.img}} hash={{sha512|sha384|sha256|sha1|md5}} hashlog={{file.hash}} hashwindow={{1G}}