# Install dcfldd with Homebrew, apt, dnf, MacPorts, Nix

Enhanced version of dd for forensics and security. Version 1.9.3 via Homebrew; verified from local package data. Also installable with debian: sudo apt install dcfldd.

## Install

```sh
sudo av install brew:dcfldd
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install dcfldd
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install dcfldd
```

  Evidence: MacPorts ports tree: sysutils/dcfldd/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install dcfldd
```

  Evidence: Debian stable package indexes: dcfldd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install dcfldd
```

  Evidence: Fedora Rawhide package metadata: dcfldd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#dcfldd
```

  Evidence: nixpkgs package indexes: pkgs/by-name/dc/dcfldd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:dcfldd
- **Package manager:** Homebrew
- **Version:** 1.9.3
- **Source summary:** Enhanced version of dd for forensics and security
- **Homepage:** <https://github.com/resurrecting-open-source-projects/dcfldd>
- **Repository:** <https://github.com/resurrecting-open-source-projects/dcfldd>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- dcfldd (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 1.9.3
## Project history and usage

dcfldd is an enhanced version of GNU dd for forensics and security. The official README describes features such as on-the-fly hashing, status output, flexible disk wiping, image/wipe verification, multiple outputs, split output, and native logging/piping.

### Project history

The official README says dcfldd was originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory. The current volunteer-maintained repository imported the inactive upstream from tarballs, applied Debian and other discovered patches, and recorded initial restoration work in the ChangeLog from version 1.5 onward.

### Adoption history

dcfldd spread as a forensic imaging utility because it retained dd-like command-line habits while adding evidence-handling conveniences. The input package facts show it packaged by Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE, reflecting its role in Unix forensic tool collections.

### How it is used

Users commonly choose dcfldd when disk imaging needs integrated hash calculation, progress, verification, split files, or simultaneous destinations. It keeps the operational feel of dd but makes common acquisition and wiping tasks less dependent on surrounding scripts.

### Why package nerds care

dcfldd is significant as one of the better-known forensic forks of dd. For package maintainers, it is a small, scriptable utility with a durable niche: old-school Unix imaging semantics plus the auditability expected in forensic workflows.

### Timeline

- Original era: Created by Nicholas Harbour from the DoD Computer Forensics Laboratory.
- 2019: Current GitHub repository created by the resurrecting-open-source-projects organization.
- Version 1.5 and later: Restoration work and applied patches recorded in the ChangeLog, according to the README.
- 2025: Official GitHub API metadata shows repository activity continuing into June 2025.

### Related projects

- GNU dd is the base lineage; dc3dd is the sibling forensic dd variant that occupies a similar package-manager niche.

### Sources

- <https://github.com/resurrecting-open-source-projects/dcfldd>
- <https://raw.githubusercontent.com/resurrecting-open-source-projects/dcfldd/master/README.md>
- <https://api.github.com/repos/resurrecting-open-source-projects/dcfldd>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Other Package-Manager Records

- Debian apt - dcfldd - 1.9.2-1: normalized package name match | Debian stable package indexes: dcfldd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | enhanced version of dd for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd
- Nix - dcfldd: normalized package name match | nixpkgs package indexes: pkgs/by-name/dc/dcfldd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - dcfldd - 1.9.1-1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: dcfldd from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | enhanced version of dd for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd
- dnf - dcfldd - 1.9.3-4.fc45: normalized package name match | Fedora Rawhide package metadata: dcfldd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Improved dd, useful for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd
- MacPorts - dcfldd: normalized package name match | MacPorts ports tree: sysutils/dcfldd/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/dcfldd.yml](https://github.com/mxcl/pkgdb/blob/main/combined/dcfldd.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
