From df2826e26f541f7c58710b4720632e38945108fd Mon Sep 17 00:00:00 2001
From: sidahmed-malaoui <sb.malaoui@gmail.com>
Date: Mon, 6 Jan 2020 17:32:45 +0100
Subject: [PATCH] dcfldd: add page (#3719)

---
 pages/common/dcfldd.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 pages/common/dcfldd.md

diff --git a/pages/common/dcfldd.md b/pages/common/dcfldd.md
new file mode 100644
index 0000000000..97a1d7ffe1
--- /dev/null
+++ b/pages/common/dcfldd.md
@@ -0,0 +1,12 @@
+# dcfldd
+
+> Enhanced version of dd for forensics and security.
+> More information: <http://dcfldd.sourceforge.net/>.
+
+- Copy a disk to a raw image file and hash the image using SHA256:
+
+`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash=sha256 hashlog={{file.hash}}`
+
+- Copy a disk to a raw image file, hashing each 1GB chunk:
+
+`dcfldd if=/dev/{{disk_device}} of={{file.img}} hash={{hash_algorithm}} hashlog={{file.hash}} hashwindow={{1G}}`