Microsoft's Xbox game console is little more than a low-end personal computer; with a small amount of effort it can be modified to run additional operating systems, enabling it to store gigabytes worth of non-game-related files in addition to allowing it to run various computer services. Little has been published, however, on the proper forensic procedures to determine whether an Xbox has been modified and, if so, how to create a forensic duplicate and conduct a proper digital forensics investigation. Given the growing popularity of these devices, it will be important to understand how to identify, image, and examine these systems while reducing the potential of corrupting the media. We approach Xbox forensics from an applied research methodology, providing a set of forensically sound procedures to be followed during the acquisition and subsequent analysis of an Xbox.
Tijdschrift beschrijving