Cloudflare DLP Forensic Copy Decoder is a command-line tool and interactive terminal UI (TUI) for decoding Cloudflare Data Loss Prevention (DLP) forensic copies from compressed log files. Built in Go for speed and portability, it automatically extracts, pretty-prints, and decodes base64-encoded and gzipped JSON payloads from .log.gz files, handling multiple content types. The tool offers both an interactive TUI for visual inspection and export, as well as a non-interactive CLI mode ideal for automation and scripting. It is cross-platform (Linux, macOS, Windows), dependency-free, well-tested, and easy to install via Homebrew, Winget, or direct binary download. Cloudflare DLP Forensic Copy Decoder is open source, backward compatible with the original shell script, and designed to simplify forensic and compliance analysis of Cloudflare DLP data.
Publisher’s description
What is Cloudflare DLP Forensic Copy Decoder?
Cloudflare DLP Forensic Copy Decoder is a languages & sdk program for Windows from SALT Cyber Security. It is written in Go.
Installation and requirements
Official installers exist for 64-bit and ARM64 as Portable. It runs without installation (portable).
Updates and version history
The current version is 2.3.0, released on May 19, 2026. 3 versions are listed since February 19, 2026, each with links to its own installer files.
Project description on GitHub: “A powerful command-line tool and interactive TUI for decoding and extracting Cloudflare DLP (Data Loss Prevention) forensic copies from compressed log files.”
Pros / Cons
Pros
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
In short: Cloudflare DLP Forensic Copy Decoder is a languages & sdk tool for 64-bit and ARM64 PCs.
Is Cloudflare DLP Forensic Copy Decoder safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
70908D619035A3E5B24CF5D33B9D26778A32D51B0EC480FCBFC59C5ECE325D82· Open the VirusTotal report for this hash - The link has not been checked yet
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 3 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 2.3.0Latest | May 19, 2026 | — | 64-bit PortableARM64 Portable |
| 2.2.0 | April 22, 2026 | — | 64-bit PortableARM64 Portable |
| 2.1.0 | February 19, 2026 | — | ARM64 Portable64-bit Portable |
Install from the command line
Silent install ›winget install --id Devolvio-B-V.cf-dlp-decode -eProgram files (.exe): cf-dlp-decode.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- SALT Cyber Security
- Category
- Languages & SDKs
- Licence
- As-is
- Source code
- github.com/Devolvio-B-V/cloudflare-dlp-forensic-copy-decoder
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64
- Installer
- Portable
- Version
- 2.3.0
- Released
- May 19, 2026
- Added to the catalogue
- February 19, 2026
- Versions listed
- 3
- Website
- github.com
- winget ID
- Devolvio-B-V.cf-dlp-decode
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Cloudflare DLP Forensic Copy Decoder
See all ›-
Go Programming Language1.27.0An open source programming language that makes it simple to build secure, scalable systems.Open source2.1M ↓ -
Open source2.8M ↓ -
Open source249.7K ↓ -
Open source3.7M ↓ -
Yarn1.22.22Yarn is a package manager that doubles down as project manager. Whether you work on one-shot projects or large monorepos, as a hobbyist or an enterprise user, we've got you covered.Open source1.9M ↓ -
Ccache4.14.1Ccache is a compiler cache. It speeds up recompilation by caching previous compilations and detecting when the same compilation is being done again.Open source2.2M ↓ -
Open source263.6K ↓ -
Open source12.5K ↓
Frequently asked questions
Is Cloudflare DLP Forensic Copy Decoder safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Cloudflare DLP Forensic Copy Decoder with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does Cloudflare DLP Forensic Copy Decoder run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of Cloudflare DLP Forensic Copy Decoder?
The versions page lists all 3 versions with links to their official installer files, back to February 19, 2026.
Can I use Cloudflare DLP Forensic Copy Decoder without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to Cloudflare DLP Forensic Copy Decoder?
Go Programming Language, LLVM, Deno, CMake and Yarn. The alternatives page compares them.
