mukul975/Anthropic-Cybersecurity-Skills/acquiring-disk-image-with-dd-and-dcfldd

Create forensically sound, bit-for-bit disk images using `dd` and `dcfldd` with hash verification to preserve evidence integrity.

The skill provides a series of Bash commands to identify block devices, enable write-blocking, acquire disk images (with optional compression and splitting), and verify integrity via SHA-256/MD5 hashes. It documents the process and generates reports. It relies on standard Linux utilities (`dd`, `dcfldd`, `sha256sum`, `hdparm`, `smartctl`) and does not execute arbitrary code or interact with external networks.