Notifications
Clear all

Xbox 360

5 Posts
5 Users
0 Likes
1,275 Views
cardona125
(@cardona125)
Posts: 2
New Member
Topic starter
 

Has anyone ever acquired an Xbox 360? Are there any helpful guides out there for interpreting the data and folder structure?
Thank you!

 
Posted : 12/05/2008 11:39 pm
(@kpryor)
Posts: 68
Trusted Member
 

Ssearch.org has a training cd available regarding the X-box 360. You have to be LE to get it though.

 
Posted : 13/05/2008 1:12 am
azrael
(@azrael)
Posts: 656
Honorable Member
 

Ssearch.org has a training cd available regarding the X-box 360. You have to be LE to get it though.

Interesting typo for those that have followed it …

http//www.search.org/programs/hightech/publications.asp is a bit better 😉

 
Posted : 13/05/2008 3:56 am
steve862
(@steve862)
Posts: 194
Estimable Member
 

Hi,

The drive should acquire fine but for viewing you will need a FAT32X viewer to view the folder structure.

You can also acquire it, carve all the unused disk space out (of EnCase or FTK) in 3GB chunks and run Foremost on the chunks from the Helix CD. That will carve out all the video, document and picture files (and a few others). The carve out will give you a file offset too so any files of interest can ultimately be pointed back to a physical sector. Foremost tends to fall over with chunks of 4GB or more.

Those are just two methods I have used for looking at the data on the drive. If you are looking to establish last save dates on games then there is some info out there on the correct offsets and bytes to get this data. A colleague of mine is currently working on a project to establish all dates and times of activity on a Xbox 360. It's a few weeks or even months off publication though.

Hope this helps a bit.

Steve

 
Posted : 13/05/2008 2:02 pm
(@stumpy)
Posts: 23
Eminent Member
 

I have not tried this myself but more recent versions of of Testdisk has built in support for xbox partitions. You can use this tool for imaging the partition and recovering files from it. It's available
HERE

 
Posted : 13/05/2008 2:24 pm
Share: