The answer is dd. The dd command creates a raw format file that most computer forensics analysis tools can read, which makes it useful for data acquisitions. The dd command copies a file, converting the format of the data in the process, according to the operands (values the operator works on) specified.