macOS
brew install dcflddprovider-native install command
brew / rank 6849
Enhanced version of dd for forensics and security. Version 1.9.3 via Homebrew; verified from local package data.
install
brew install dcflddprovider-native install command
overview
Enhanced version of dd for forensics and security
history
dcfldd is an enhanced version of GNU dd for forensics and security. The official README describes features such as on-the-fly hashing, status output, flexible disk wiping, image/wipe verification, multiple outputs, split output, and native logging/piping.
The official README says dcfldd was originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory. The current volunteer-maintained repository imported the inactive upstream from tarballs, applied Debian and other discovered patches, and recorded initial restoration work in the ChangeLog from version 1.5 onward.
dcfldd spread as a forensic imaging utility because it retained dd-like command-line habits while adding evidence-handling conveniences. The input package facts show it packaged by Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE, reflecting its role in Unix forensic tool collections.
Users commonly choose dcfldd when disk imaging needs integrated hash calculation, progress, verification, split files, or simultaneous destinations. It keeps the operational feel of dd but makes common acquisition and wiping tasks less dependent on surrounding scripts.
dcfldd is significant as one of the better-known forensic forks of dd. For package maintainers, it is a small, scriptable utility with a durable niche: old-school Unix imaging semantics plus the auditability expected in forensic workflows.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
dcfldd | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:dcfldd |
|---|---|
| Version | 1.9.3 |
| Package manager | Homebrew |
| Homepage | https://github.com/resurrecting-open-source-projects/dcfldd |
| Repository | https://github.com/resurrecting-open-source-projects/dcfldd |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.