Hi.
Im a final year student studying forensic computing, and for my final project im looking into how game consoles are becoming more prominent in the forensic computing word. With modern consoles like the 'Playstation 3' and 'Xbox 360' being built with hard drives, and with handheld consoles like the 'Nintendo DS' having "M3/R4" cards, the ability to store and hide data has becomes more exstensive.
Has anyone worked with analysing game consoles? Were there any special procedures you had to take? How different was it from analysing a standard Windows hard drive?
I'd like to hear of anyone's experience.
thanks
Carl
In theory, as far as I know playstation3s (and Xbox 360s?) run off laptop hard drives. Therefore I would imagine that they could be removed from their system and forensicly imaged the same way as a PC hard disk drive would.
Matt.
I've been playing with "PhotoRec" lately for testing purposes and it offers an XBox hard drive "recovery scan"
In theory, as far as I know playstation3s (and Xbox 360s?) run off laptop hard drives. Therefore I would imagine that they could be removed from their system and forensicly imaged the same way as a PC hard disk drive would.
Matt.
Imaged yes, but they do not contain standard filesystems so you have to become more creative in extracting data from the image. Cloning a drive allows you to see the data the user could see but you need to employ other techniques for deleted info.
The Xbox employs a propreitary file system called FatX that Microsoft developed just for the Xbox.
You can google it. There has been some work done in Xbox forensics.
In theory, as far as I know playstation3s (and Xbox 360s?) run off laptop hard drives. Therefore I would imagine that they could be removed from their system and forensicly imaged the same way as a PC hard disk drive would.
Matt.
As said above, the file system is different, on the hardware side, the PS3 is very much designed to allow user access to upgrade, also Sony have provided support for other operating systems. My PS3 is ext3 as well as PS3 formatted, although until I get further in Oblivion, there will be nothing I can tell you about it, as I don't have time -P
yeah they are run off laptops..easily removable