zfs discuss - Nov 2007 - PROPOSAL: Open Solaris Forensics Toolkit Project

Hello all 

I am posting the proposal in topic to this community for comment and
hoping to count on eventual sponsorship. 

I already discussed this idea with the security community and the
outcome is that such project will be an interesting thing to have.

Please find more info on the discussion and background on the following
blog post:
http://blogs.sun.com/efi/category/Forensics+and+Incident+Response

One of the biggest gaps identified during this discussion was, without a
doubt, the lack of _proper_ ZFS forensics toolkit. 

The Open Solaris Forensics Toolkit project proposes to drive a creation
of such a toolkit.

This is a big challenge which will be impossible without the involvement
and sponsorship from the ZFS community.

I will be looking forward for comments on this idea and will welcome
eventual volunteers willing to join the project team if such idea is
deemed relevant.
 
 
Cheers
Evtim (Efi) Batchev