{
	"id": "10df0cd7-7a90-4bd1-b000-887ff2dd548d",
	"created_at": "2026-04-06T00:19:57.536587Z",
	"updated_at": "2026-04-10T03:33:16.721746Z",
	"deleted_at": null,
	"sha1_hash": "e307c1a37e7eab1bdb265342afc7b918002f7c3c",
	"title": "dd(1) - Linux manual page",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 65633,
	"plain_text": "dd(1) - Linux manual page\r\nArchived: 2026-04-05 19:21:16 UTC\r\nDD(1) User Commands DD(1)\r\nNAME         top\r\n dd - convert and copy a file\r\nSYNOPSIS         top\r\n dd [OPERAND]...\r\n dd OPTION\r\nDESCRIPTION         top\r\n Copy a file, converting and formatting according to the operands.\r\n bs=BYTES\r\n read and write up to BYTES bytes at a time (default: 512);\r\n overrides ibs and obs\r\n cbs=BYTES\r\n convert BYTES bytes at a time\r\n conv=CONVS\r\n convert the file as per the comma separated symbol list\r\n count=N\r\n copy only N input blocks\r\n ibs=BYTES\r\n read up to BYTES bytes at a time (default: 512)\r\n if=FILE\r\n read from FILE instead of standard input\r\n iflag=FLAGS\r\n read as per the comma separated symbol list\r\nhttp://man7.org/linux/man-pages/man1/dd.1.html\r\nPage 1 of 5\n\nobs=BYTES\r\n write BYTES bytes at a time (default: 512)\r\n of=FILE\r\n write to FILE instead of standard output\r\n oflag=FLAGS\r\n write as per the comma separated symbol list\r\n seek=N (or oseek=N) skip N obs-sized output blocks\r\n skip=N (or iseek=N) skip N ibs-sized input blocks\r\n status=LEVEL\r\n The LEVEL of information to print to standard error; 'none'\r\n suppresses everything but error messages, 'noxfer'\r\n suppresses the final transfer statistics, 'progress' shows\r\n periodic transfer statistics\r\n N and BYTES may be followed by the following multiplicative\r\n suffixes: c=1, w=2, b=512, kB=1000, K=1024, MB=1000*1000,\r\n M=1024*1024, xM=M, GB=1000*1000*1000, G=1024*1024*1024, and so on\r\n for T, P, E, Z, Y, R, Q. Binary prefixes can be used, too: KiB=K,\r\n MiB=M, and so on. If N ends in 'B', it counts bytes not blocks.\r\n Each CONV symbol may be:\r\n ascii from EBCDIC to ASCII\r\n ebcdic from ASCII to EBCDIC\r\n ibm from ASCII to alternate EBCDIC\r\n block pad newline-terminated records with spaces to cbs-size\r\n unblock\r\n replace trailing spaces in cbs-size records with newline\r\n lcase change upper case to lower case\r\n ucase change lower case to upper case\r\n sparse try to seek rather than write all-NUL output blocks\r\n swab swap every pair of input bytes\r\nhttp://man7.org/linux/man-pages/man1/dd.1.html\r\nPage 2 of 5\n\nsync pad every input block with NULs to ibs-size; when used with\r\n block or unblock, pad with spaces rather than NULs\r\n excl fail if the output file already exists\r\n nocreat\r\n do not create the output file\r\n notrunc\r\n do not truncate the output file\r\n noerror\r\n continue after read errors\r\n fdatasync\r\n physically write output file data before finishing\r\n fsync likewise, but also write metadata\r\n Each FLAG symbol may be:\r\n append append mode (makes sense only for output; conv=notrunc\r\n suggested)\r\n direct use direct I/O for data\r\n directory\r\n fail unless a directory\r\n dsync use synchronized I/O for data\r\n sync likewise, but also for metadata\r\n fullblock\r\n accumulate full blocks of input (iflag only)\r\n nonblock\r\n use non-blocking I/O\r\n noatime\r\n do not update access time\r\n nocache\r\n Request to drop cache. See also oflag=sync\r\n noctty do not assign controlling terminal from file\r\nhttp://man7.org/linux/man-pages/man1/dd.1.html\r\nPage 3 of 5\n\nnofollow\n do not follow symlinks\n Sending a USR1 signal to a running 'dd' process makes it print I/O\n statistics to standard error and then resume copying.\n Options are:\n --help display this help and exit\n --version\n output version information and exit\nAUTHOR top\n Written by Paul Rubin, David MacKenzie, and Stuart Kemp.\nREPORTING BUGS top\n Report bugs to: bug-coreutils@gnu.org\n GNU coreutils home page: General help using GNU software: Report any translation bugs to COPYRIGHT top\n Copyright © 2025 Free Software Foundation, Inc. License GPLv3+:\n GNU GPL version 3 or later .\n This is free software: you are free to change and redistribute it.\n There is NO WARRANTY, to the extent permitted by law.\nSEE ALSO top\n Full documentation or available locally via: info '(coreutils) dd invocation'\nCOLOPHON top\n This page is part of the coreutils (basic file, shell and text\n manipulation utilities) project. Information about the project\nhttp://man7.org/linux/man-pages/man1/dd.1.html\nPage 4 of 5\n\ncan be found at ⟨http://www.gnu.org/software/coreutils/⟩. If you\r\n have a bug report for this manual page, see\r\n ⟨http://www.gnu.org/software/coreutils/⟩. This page was obtained\r\n from the tarball coreutils-9.9.tar.xz fetched from\r\n ⟨http://ftp.gnu.org/gnu/coreutils/⟩ on 2026-01-16. If you\r\n discover any rendering problems in this HTML version of the page,\r\n or you believe there is a better or more up-to-date source for the\r\n page, or you have corrections or improvements to the information\r\n in this COLOPHON (which is not part of the original manual page),\r\n send a mail to man-pages@man7.org\r\nGNU coreutils 9.9 November 2025 DD(1)\r\nPages that refer to this page: pipesz(1),  truncate(1),  xfs(5),  fdisk(8),  sfdisk(8),  swapon(8),  xfs_copy(8), \r\nxfs_repair(8)\r\nSource: http://man7.org/linux/man-pages/man1/dd.1.html\r\nhttp://man7.org/linux/man-pages/man1/dd.1.html\r\nPage 5 of 5",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"http://man7.org/linux/man-pages/man1/dd.1.html"
	],
	"report_names": [
		"dd.1.html"
	],
	"threat_actors": [
		{
			"id": "1f6ae238-765f-4495-9d54-6a7883d7a319",
			"created_at": "2022-10-25T16:07:24.573456Z",
			"updated_at": "2026-04-10T02:00:05.037738Z",
			"deleted_at": null,
			"main_name": "TA511",
			"aliases": [
				"MAN1",
				"Moskalvzapoe"
			],
			"source_name": "ETDA:TA511",
			"tools": [
				"Agentemis",
				"Chanitor",
				"Cobalt Strike",
				"CobaltStrike",
				"Ficker Stealer",
				"Hancitor",
				"NetSupport",
				"NetSupport Manager",
				"NetSupport Manager RAT",
				"NetSupport RAT",
				"NetSupportManager RAT",
				"cobeacon"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "542cf9d0-9c68-428c-aff8-81b6f59dc985",
			"created_at": "2023-02-15T02:01:49.554105Z",
			"updated_at": "2026-04-10T02:00:03.347115Z",
			"deleted_at": null,
			"main_name": "Moskalvzapoe",
			"aliases": [
				"MAN1",
				"TA511"
			],
			"source_name": "MISPGALAXY:Moskalvzapoe",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434797,
	"ts_updated_at": 1775791996,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/e307c1a37e7eab1bdb265342afc7b918002f7c3c.pdf",
		"text": "https://archive.orkl.eu/e307c1a37e7eab1bdb265342afc7b918002f7c3c.txt",
		"img": "https://archive.orkl.eu/e307c1a37e7eab1bdb265342afc7b918002f7c3c.jpg"
	}
}