April 10th, 2011 | Published in Xbox, Xbox 360
I received this through a mailing list, so I’m not sure who created it. If this is your presentation, please contact me and I’ll update this post accordingly.
This presentation contains a lot of information about forensic operations on both the original Xbox and the Xbox 360. Topics include imaging, video and audio capture, legal issues, and more. Definitely worth a look.
July 6th, 2010 | Published in Tools, Xbox, Xbox 360
As far as I know, this is the only XBox forensics tool that was actually written with forensics in mind. I’ll have to see if my department can get a copy to play around with.
Greetings from Protowise Labs!
We are happy to announce the official release of XFT 2.0 Game Console Forensics toolkit. In conjunction with the release, Protowise Labs will be hosting a series of Game Console Forensics Training sessions over the course of the year. The full day training session includes 8 hours of classroom and hands on sessions, including FATX (Original Xbox) and XTAF (Xbox 360) file system forensics, ATA key recovery and drive unlocking, forensic issues with the Xbox 360, and forensic issues and implications of other game consoles. Training is $650.00 per seat and includes one XFT license with free updates for 1 year. Please do not make travel arrangements until training has been confirmed by us via email on or before August 27, 2010. After registration, you will receive an email invoice, at which time payment is due. We will send a confirmation email one month prior to training day, at which time you should make travel arrangements. Again, please do not make travel arrangements prior to confirmation. To register, click the registration link below or go to http://www.protowise.com and click the registration link. You can view the training syllabus on the Protowise website. Seats are limited so if the class fills up we will open another session to be scheduled shortly after September.
REGISTER NOW for the September 27, 2010 training in The Woodlands, Texas.
We hope to see you in The Woodlands in September!
October 26th, 2009 | Published in Tools, Xbox 360
Xbox 360s use standard 2.5″ SATA drives, but due to the fact that they are formatted with the FATX file system, common forensic tool suites such as Encase and FTK are unable to read them.
However, there are several 3rd party tools that have been released by members of the hacking and modification community that can read FATX and display the contents of the drive in a GUI from within Windows. Consider giving these a try:
Also, Linux can mount FATX volumes with proper modifications to the kernel. Please see this page of the Xbox-Linux wiki for more details.