Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstation, preserving evidence integrity through hash verification (MD5/SHA) during acquisition. Use when imaging a suspect drive, USB device, or memory card for investigation, preserving volatile disk evidence during incident response, or producing a verified copy for legal or law-enforcement proceedings…
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill acquiring-disk-image-with-dd-and-dcflddnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill acquiring-disk-image-with-dd-and-dcfldd -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill acquiring-disk-image-with-dd-and-dcfldd -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/acquiring-disk-image-with-dd-and-dcflddgh skill install mukul975/Anthropic-Cybersecurity-Skills acquiring-disk-image-with-dd-and-dcflddgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/acquiring-disk-image-with-dd-and-dcfldd ~/.claude/skills/acquiring-disk-image-with-dd-and-dcfldd # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/acquiring-disk-image-with-dd-and-dcfldd ~/.agents/skills/acquiring-disk-image-with-dd-and-dcfldd # Codex, Cursor, Gemini CLI, Copilot, OpenCode