# Install dcfldd with Homebrew, apt, dnf, MacPorts, Nix Enhanced version of dd for forensics and security. Version 1.9.3 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:dcfldd ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install dcfldd ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install dcfldd ``` Evidence: MacPorts ports tree: sysutils/dcfldd/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install dcfldd ``` Evidence: Debian stable package indexes: dcfldd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install dcfldd ``` Evidence: Fedora Rawhide package metadata: dcfldd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#dcfldd ``` Evidence: nixpkgs package indexes: pkgs/by-name/dc/dcfldd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:dcfldd - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.3 - **Source summary:** Enhanced version of dd for forensics and security - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - dcfldd (cli) - dcfldd (alias) ## Build dependencies - autoconf - automake - pkgconf ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.9.3 - Local data: ok - Upstream repository: https://github.com/resurrecting-open-source-projects/dcfldd - Upstream latest detected: v1.9.3 (current) - info: No package-manager update timestamp was available. ## Project history and usage dcfldd is an enhanced version of GNU dd for forensics and security. The official README describes features such as on-the-fly hashing, status output, flexible disk wiping, image/wipe verification, multiple outputs, split output, and native logging/piping. ### Project history The official README says dcfldd was originally created by Nicholas Harbour from the DoD Computer Forensics Laboratory. The current volunteer-maintained repository imported the inactive upstream from tarballs, applied Debian and other discovered patches, and recorded initial restoration work in the ChangeLog from version 1.5 onward. ### Adoption history dcfldd spread as a forensic imaging utility because it retained dd-like command-line habits while adding evidence-handling conveniences. The input package facts show it packaged by Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE, reflecting its role in Unix forensic tool collections. ### How it is used Users commonly choose dcfldd when disk imaging needs integrated hash calculation, progress, verification, split files, or simultaneous destinations. It keeps the operational feel of dd but makes common acquisition and wiping tasks less dependent on surrounding scripts. ### Why package nerds care dcfldd is significant as one of the better-known forensic forks of dd. For package maintainers, it is a small, scriptable utility with a durable niche: old-school Unix imaging semantics plus the auditability expected in forensic workflows. ### Timeline - Original era: Created by Nicholas Harbour from the DoD Computer Forensics Laboratory. - 2019: Current GitHub repository created by the resurrecting-open-source-projects organization. - Version 1.5 and later: Restoration work and applied patches recorded in the ChangeLog, according to the README. - 2025: Official GitHub API metadata shows repository activity continuing into June 2025. ### Related projects - GNU dd is the base lineage; dc3dd is the sibling forensic dd variant that occupies a similar package-manager niche. ### Sources - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** dcfldd - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - dcfldd - 1.9.2-1: normalized package name match | Debian stable package indexes: dcfldd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | enhanced version of dd for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd - Nix - dcfldd: normalized package name match | nixpkgs package indexes: pkgs/by-name/dc/dcfldd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - dcfldd - 1.9.1-1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: dcfldd from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | enhanced version of dd for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd - dnf - dcfldd - 1.9.3-3.fc44: normalized package name match | Fedora Rawhide package metadata: dcfldd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Improved dd, useful for forensics and security | https://github.com/resurrecting-open-source-projects/dcfldd - MacPorts - dcfldd: normalized package name match | MacPorts ports tree: sysutils/dcfldd/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [autoconf](https://www.automicvault.com/pkg/brew/autoconf/) - Build dependency declared by Homebrew. - [automake](https://www.automicvault.com/pkg/brew/automake/) - Build dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [dc3dd](https://www.automicvault.com/pkg/brew/dc3dd/) - Shares av.db curated category or tags: cli, disk-imaging, forensics, security. - [afflib](https://www.automicvault.com/pkg/brew/afflib/) - Shares av.db curated category or tags: cli, forensics, security. - [chainsaw](https://www.automicvault.com/pkg/brew/chainsaw/) - Shares av.db curated category or tags: cli, forensics, security. - [evtx](https://www.automicvault.com/pkg/brew/evtx/) - Shares av.db curated category or tags: cli, forensics, security. - [hack-browser-data](https://www.automicvault.com/pkg/brew/hack-browser-data/) - Shares av.db curated category or tags: cli, forensics, security. - [mac-robber](https://www.automicvault.com/pkg/brew/mac-robber/) - Shares av.db curated category or tags: cli, forensics, security. - [ssdeep](https://www.automicvault.com/pkg/brew/ssdeep/) - Shares av.db curated category or tags: cli, forensics, security. - [name-that-hash](https://www.automicvault.com/pkg/brew/name-that-hash/) - Shares av.db curated category or tags: cli, forensics, security. ## Combined YAML source View the package source record on GitHub. [combined/dcfldd.yml](https://github.com/automic-vault/db/blob/main/combined/dcfldd.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph