dcfldd
#Incident Management#Digital Forensics
A library to access the Expert Witness Compression Format (EWF) for digital forensics and incident response.
dcfldd: A Modified Version of GNU dd with Enhanced Features
dcfldd is a modified version of GNU dd that includes additional features such as hashing, rapid disk wiping, and status output. This tool was originally developed by Nicholas Harbour at the DoD Computer Forensics Laboratory (DCFL), and he now maintains it independently.
The latest version is available
You can find the latest version on GitHub at https://github.com/adulau/dcfldd/. This version includes Debian patches as well as additional patches contributed by Alexandre Dulaunoy.