Examples:

(assumes dc3dd compiled with: ./configure CFLAGS="-O2 -DDEFAULT_HASHCONV_AFTER")


Imaging a hard drive to a single image file with logging and hashing:
dc3dd if=/dev/sda of=suspect.img hash=md5,sha1 log=suspect.txt

Imaging a hard drive to a single image file with logging and hashing, using a large block size:
dc3dd if=/dev/sda of=suspect.img bs=262144 hash=md5,sha1 log=suspect.txt

Imaging a hard drive with errors to a single image file with logging and hashing:
dc3dd if=/dev/sda of=suspect.img conv=sync,noerror iflag=direct hash=md5,sha1 log=suspect.txt


Imaging a hard drive to CD-sized split images with logging and hashing:
dc3dd if=/dev/sda of=suspect.img split=650M splitformat=000 hash=md5,sha1 log=suspect.txt



Verifying an acquired single image file:
dc3dd if=/dev/sda vf=suspect.img log=suspect.txt

Verifying an acquired split image:
dc3dd if=/dev/sda vfjoin=suspect.img.000 log=suspect.txt



Wiping a drive:
dc3dd wipe=/dev/sdb log=wipe.txt

Verifying a wipe:
dc3dd pattern=00 vf=/dev/sdb log=wipe.txt



Restoring a single image file to a blank drive:
dc3dd if=suspect.img of=/dev/sdb hash=md5,sha1 log=suspect-restore.txt

Restoring a split image to a blank drive:
dc3dd ifjoin=suspect.img.000 of=/dev/sdb hash=md5,sha1 log=suspect-restore.txt



Verifying a single image file restore:
dc3dd if=suspect.img vf=/dev/sdb log=suspect-restore.txt

Verifying a split image restore:
dc3dd ifjoin=suspect.img.000 vf=/dev/sdb log=suspect-restore.txt
