pkg.sopackage field notes

brew / rank 6849

Install dcfldd with Homebrew

Enhanced version of dd for forensics and security. Version 1.9.3 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install dcfldd

provider-native install command

overview

Package summary

Enhanced version of dd for forensics and security

Commands and aliases

  • dcfldd

history

Project history and usage

dcfldd is an enhanced version of GNU dd for forensics and security. The official README describes features such as on-the-fly hashing, status output, flexible disk wiping, image/wipe verification, multiple outputs, split output, and native logging/piping.

Project history

The official README says dcfldd was originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory. The current volunteer-maintained repository imported the inactive upstream from tarballs, applied Debian and other discovered patches, and recorded initial restoration work in the ChangeLog from version 1.5 onward.

Adoption history

dcfldd spread as a forensic imaging utility because it retained dd-like command-line habits while adding evidence-handling conveniences. The input package facts show it packaged by Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE, reflecting its role in Unix forensic tool collections.

How it is used

Users commonly choose dcfldd when disk imaging needs integrated hash calculation, progress, verification, split files, or simultaneous destinations. It keeps the operational feel of dd but makes common acquisition and wiping tasks less dependent on surrounding scripts.

Why package nerds care

dcfldd is significant as one of the better-known forensic forks of dd. For package maintainers, it is a small, scriptable utility with a durable niche: old-school Unix imaging semantics plus the auditability expected in forensic workflows.

Timeline

  • Original era: Created by Nicholas Harbour from the DoD Computer Forensics Laboratory.
  • 2019: Current GitHub repository created by the resurrecting-open-source-projects organization.
  • Version 1.5 and later: Restoration work and applied patches recorded in the ChangeLog, according to the README.
  • 2025: Official GitHub API metadata shows repository activity continuing into June 2025.

Related projects

  • GNU dd is the base lineage; dc3dd is the sibling forensic dd variant that occupies a similar package-manager niche.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
dcflddexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.9.3
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:dcfldd
Version1.9.3
Package managerHomebrew
Homepagehttps://github.com/resurrecting-open-source-projects/dcfldd
Repositoryhttps://github.com/resurrecting-open-source-projects/dcfldd
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation