S0 — Sector Zero
Unified forensic data sanitization, bit-stream acquisition & evidence carving suite with cryptographic chain-of-custody.
Forensic Capabilities
Deterministic, hardware-level forensic workflows with mathematical non-repudiation.
Media & File Sanitization
Purge physical drives, SSDs, and files aligned with NIST SP 800-88 Rev. 2 & IEEE 2883-2022 via NVMe Sanitize, ATA Secure Erase, or multi-pass CSPRNG overwriting. Emits Ed25519-signed PDF/JSON certificates.
Forensic Evidence Carving
Reconstruct deleted evidence from raw images across ext4, NTFS, FAT32, and exFAT. Evaluates structural confidence using 4-factor Shannon entropy scoring and bifragment cluster reassembly.
Bit-Stream Acquisition & Cloning
Fault-tolerant raw image acquisition (.raw / .dd) and drive cloning per ISO/IEC 27037. Performs simultaneous live SHA-256 and MD5 hashing with ddrescue-style bad sector zero-filling.
Hash-Chained Audit Ledger
Records every laboratory operation into an append-only, SHA-256 hash-chained SQLite ledger (~/.s0/s0_audit.db) for tamper-evident chain of custody verifiable in milliseconds.
Zero-Trust Verification Portal
100% client-side WebCrypto validator at sector-zero.pages.dev/verify. Drag and drop JSON certificates, PDFs, or QR images with zero data leaving your machine.
See S0 in Action
Real output simulation: 1-line installation, disk enumeration, evidence recovery, NIST media erasing, audit ledger, and cryptographic verification.
Quick Installation
One command configures an isolated virtual environment and registers s0 on your system PATH.
Linux & macOS
Bash / ZshWindows
PowerShellWindows
Command PromptBare-Metal Bootable ISO
Debian 12 KioskForensic Suite Comparison
How s0 compares to existing data sanitization and forensic carving utilities.
| Forensic Capability | s0 (Sector Zero) | DBAN | Autopsy | Foremost | dd / shred |
|---|---|---|---|---|---|
| NIST SP 800-88 & IEEE 2883 | Purge & Clear | Clear Only | None | None | Non-compliant |
| Ed25519 Cryptographic Certificates | JSON & PDF + QR | None | None | None | None |
| RFC 8785 Canonical JSON (JCS) | Pure JCS | No | No | No | No |
| Forensic Evidence Carving | 5 Inode/MFT Engines | Destructive Only | Analysis GUI | Header Only | No |
| Shannon Entropy Scoring | 3-Point Sampled | No | Heuristic | No | No |
| Simultaneous Dual Hashing | Single Pass | No | Post-hoc | No | Requires tee |
| Hash-Chained Audit Ledger | SHA-256 SQLite | Plain text | Case DB | Plain text | None |
| Zero-Trust Web Verifier | Pure WebCrypto | No | No | No | No |
| Cross-Platform Native | Linux, macOS, Win | Bootable Only | Win Focused | POSIX Only | POSIX Only |
| Open Source License | MIT | GPL | Apache 2.0 | Public Domain | GPL |