Skip to content

s0 — Technical Presentation & Live Demonstration

Title: Integrated Secure Data Erasure and Advanced File Recovery Tool for Digital Forensics and Data Sanitization
Format: 5-Minute Technical Pitch + 3-Minute Live Interactive Demonstration

1. The Challenge Faced in Defense & Forensics

Digital forensics and data security operations face two fundamental, conflicting challenges: 1. The Sanitization Challenge (Defensive): Intelligence agencies and defense establishments need to irreversibly sanitize decommissioned storage media and classified files so that foreign adversaries cannot extract confidential intelligence. 2. The Recovery Challenge (Offensive): Cyber forensic investigators need to extract, carve, and reconstruct deleted or concealed digital evidence from seized, formatted, or corrupted storage devices. 3. The Fragmentation Problem: Currently, investigators must juggle multiple disjoint, proprietary, and costly tools (e.g. Blancco for drive wiping, BCWipe for file deletion, Autopsy/FTK for carving). This introduces operational friction, high licensing costs, and broken audit trails.

2. The Solution: s0 Unified Forensic Suite

s0 integrates data sanitization, forensic file carving, and blockchain audit logging into a single high-performance platform:

┌────────────────────────────────────────────────────────────────────────┐
│                        S0 CORE MODULES                          │
├──────────────────────────────────┬─────────────────────────────────────┤
│ 1. Secure Drive Eraser           │ Firmware Purge (NVMe/ATA), Discard, │
│    (Module 1)                    │ 1-pass Clear + Forensic Verification│
├──────────────────────────────────┼─────────────────────────────────────┤
│ 2. Secure File & Folder Eraser   │ Extents overwrite, metadata zeroing,│
│    (Module 2)                    │ directory entry scrambling & batch  │
├──────────────────────────────────┼─────────────────────────────────────┤
│ 3. Advanced File Carving         │ Signature (JPEG/PNG/PDF/ZIP), Ext4  │
│    (Module 3)                    │ & NTFS MFT parser & entropy scoring │
├──────────────────────────────────┼─────────────────────────────────────┤
│ 4. Blockchain Audit Ledger       │ Append-only SQLite ledger with      │
│    (Module 4)                    │ SHA-256 block hash chaining         │
└──────────────────────────────────┴─────────────────────────────────────┘

3. Live 3-Minute Demonstration Script

Minute 1: Module 1 & 2 (Drive & File Sanitization)

  • Presenter: "Judges, let us demonstrate irreversible sanitization on sensitive files and storage media."
  • Action: Run s0 erase --targets classified_intel.pdf and demo_e2e.sh.
  • Result: File clusters overwritten, metadata zeroed, 64-block forensic scan shows 0 hits, Ed25519 signed certificate generated.

Minute 2: Module 3 (Advanced File Carving & Recovery)

  • Presenter: "Now let us switch to our offensive forensic capability: carving deleted evidence from a formatted raw disk image."
  • Action: Run s0 carve --target /evidence/suspect_drive.raw --out-dir ./recovered.
  • Result: Carver scans disk, identifies magic headers/footers, calculates Shannon entropy confidence scores (>85%), extracts recovered files, and outputs a signed forensic recovery manifest.

Minute 3: Module 4 (Blockchain Audit Ledger)

  • Presenter: "How do we guarantee unbroken chain-of-custody for compliance audits?"
  • Action: Open web dashboard or run s0 audit verify.
  • Result: Displays the SHA-256 hash-chained block ledger. Simulate a tampering attempt in SQLite and show the auditor detecting the exact broken block index immediately.