v0.1.0 - Modern Forensic Disk Imaging & Conversion Tool
π dfdisk v0.1.0
Modern forensic disk imaging, damaged media rescue, and format conversion CLI/TUI tool for Digital Forensics and Incident Response (DFIR).
β‘ Highlights
- Forensic E01 Acquisition: Full Expert Witness Format compatibility via
libewf, compression tuning, split sizes, and bad sector zero-fill. - Damaged Media Rescue: Non-destructive multi-pass imaging engine powered by
ddrescuewith mapfiles. - Auto Evidence Naming: Standardized forensic case naming pipeline (
{case}_{ea}_{evidence}_{serial}.E01). - Cryptographic Verification: Parallel multi-hasher calculating and verifying MD5, SHA-1, and SHA-256.
- Interactive TUI: Dark console dashboard built with Ratatui and Tokio.
- Format Converter: Bi-directional conversion between RAW (
.raw/.dd) and E01 (.E01).
π¦ Installation & Packages
- Debian / Ubuntu: Download and install
dfdisk_0.1.0-1_amd64.debattached below. - Arch Linux: Build via
packaging/arch/PKGBUILDor installdfdiskfrom AUR. - Nix / NixOS: Run directly with
nix run github:tylerstyle/dfdiskor build withnix build. - Pre-compiled Binary: Download and extract
dfdisk-v0.1.0-x86_64-unknown-linux-gnu.tar.gz.
Full Changelog: https://github.com/tylerstyle/dfdisk/commits/v0.1.0