MattockFS
Channel: InnuenDo
Date: 03/07/2016

Short presentation outlining the MattockFS computer-forensic file-system. The github page can be found here:

https://github.com/pibara/MattockFS

I created MttockFS as part of my research project for my M.Sc Forensic Computing and Cybercrime Investigations at the University College Dublin, where I looked at page-cache and other spurious-read issues with the historic Open Computer Forensic Architecture (OCFA), and created this computer forensic file-system as foundational component for future computer forensic framework efforts. MattockFS is both a forensic data and meta-data archive and a local message-bus system aimed at providing page-cache friendly interaction between framework modules, and at providing least authority as a means to allow future framework to maintain high integrity  properties in the face of directed anti-forensic attacks.
I am currently working on tying together the last set of loose ends here:

https://github.com/pibara/MattockFS/blob/master/TODO.txt
 
My MattockFS minor thesis, that I handed in a few weeks ago, is available on request.