Joshua I. James

Joshua I. James

DFIR Researcher


[How To] Forensic Acquisition in Linux - DCFLDD

less than 1 minute read

This video shows how to use DCFLDD to acquire a disk image from a suspect device in the Linux command line. DCFLDD is an expanded version of 'dd' that supports additional features that are useful for digital forensic acquisitions.


Leave a Comment

You May Also Enjoy

Getting started in Digital Forensics

6 minute read

A lot of people have asked how to get started with digital forensics. It’s great that so many people from so many different places are interested. There are ...