CmdID / Commands
dcfldd
Enhanced version of dd for forensics and security. tldr-pages
On several platforms
Copy a disk to a raw image file and hash the image using SHA256
dcfldd if=/dev/disk_device of=file.img hash=sha256 hashlog=file.hashIdentify
Copy a disk to a raw image file, hashing each 1 GB chunk
dcfldd if=/dev/disk_device of=file.img hash=sha512 hashlog=file.hash hashwindow=1GIdentify