S0 — Sector Zero
Unified forensic data sanitization, bit-stream acquisition & evidence carving suite with cryptographic chain-of-custody.
Forensic Capabilities
Deterministic, hardware-level forensic workflows with mathematical non-repudiation.
Media & File Sanitization
Purge physical drives, SSDs, and files per NIST SP 800-88 Rev. 1 & IEEE 2883-2022 via NVMe Sanitize, ATA Secure Erase, or multi-pass CSPRNG overwriting. Emits Ed25519-signed PDF/JSON certificates.
Forensic Evidence Carving
Reconstruct deleted evidence from raw images across ext4, NTFS, FAT32, and exFAT. Evaluates structural confidence using 4-factor Shannon entropy scoring and bifragment cluster reassembly.
Bit-Stream Acquisition & Cloning
Fault-tolerant raw image acquisition (.raw / .dd) and drive cloning per ISO/IEC 27037. Performs simultaneous live SHA-256 and MD5 hashing with ddrescue-style bad sector zero-filling.
Hash-Chained Audit Ledger
Records every laboratory operation into an append-only, SHA-256 hash-chained SQLite ledger (~/.s0/s0_audit.db) for tamper-evident chain of custody verifiable in milliseconds.
Zero-Trust Verification Portal
100% client-side WebCrypto validator at s0-verify.pages.dev. Drag and drop JSON certificates, PDFs, or QR images with zero data leaving your machine.
See S0 in Action
Real output simulation: 1-line installation, device discovery, sanitization, and offline certificate verification.
Quick Installation
One command configures an isolated virtual environment and registers s0 on your system PATH.
Linux & macOS
Bash / ZshWindows
PowerShellWindows
Command PromptBare-Metal Bootable ISO
Debian 12 KioskForensic Suite Comparison
How s0 compares to existing data sanitization and forensic carving utilities.
| Forensic Capability | s0 (Sector Zero) | DBAN | Autopsy | Foremost | dd / shred |
|---|---|---|---|---|---|
| NIST SP 800-88 & IEEE 2883 | Purge & Clear | Clear Only | None | None | Non-compliant |
| Ed25519 Cryptographic Certificates | JSON & PDF + QR | None | None | None | None |
| RFC 8785 Canonical JSON (JCS) | Pure JCS | No | No | No | No |
| Forensic Evidence Carving | 5 Inode/MFT Engines | Destructive Only | Analysis GUI | Header Only | No |
| Shannon Entropy Scoring | 3-Point Sampled | No | Heuristic | No | No |
| Simultaneous Dual Hashing | Single Pass | No | Post-hoc | No | Requires tee |
| Hash-Chained Audit Ledger | SHA-256 SQLite | Plain text | Case DB | Plain text | None |
| Zero-Trust Web Verifier | Pure WebCrypto | No | No | No | No |
| Cross-Platform Native | Linux, macOS, Win | Bootable Only | Win Focused | POSIX Only | POSIX Only |
| Open Source License | MIT | GPL | Apache 2.0 | Public Domain | GPL |