Hi there,
I hope you are well. I am hoping to do my graduation project topic on the forensic acquisition of Playstation 5 or Roblox. My worry is encryption. I was wondering if there has been any new findings and/or cases? Does anyone have any hands on experience with the PS5?
I would be using a personal PS5 for this project, therefore I would know the logon information. From my previous research, I understand that:
- "PS4 and PS5 both use x86-64 custom AMD CPUs. Firmware, GPU, and custom OS are optimized for gaming, but the overall architecture is much like a PC."
- "The PS4 came with a 5400 RPM HDD but you may find that the owner has upgraded it to an SSD because the HDD is very slow by modern standards. Some people are even installing Linux on their old PS4."
- "The PS5 ships with a M.2 NVMe SSD, so in addition to the potential encryption issues our colleague mentioned, you’re guaranteed to be dealing with TRIM on a device that changes a lot of data (regular game updates, and they’re often big)."
- "No removable NVME or SSD that can be seen. The SSD chips are soldered to the motherboard. Since encrypted, chip-off is not an option.
- A live capture cannot be performed without the logon information.
I hope to extract the following informations:
- Geolocation
- Game collection and activity
- Which games were played with which friend
- User information
- Contents of messages, including photo or video messages
- Voice chat logs
- Time stamp verification on: login, games, messages, voice chats
- Captured media
My other project idea was to work on games that have children as their target audience, more specifically Roblox. This could be done on PC. I am looking into this more and for now- I know that usernames can be verified on PC using FTk Imager. Acquisition will hopefully include:
- Messages
- Voice calls
- Profiles & friends
- Time stamps
- Game activity... for example, making a shower area that may be sexual in nature and speaking to minors?
Any and all thoughts, ideas, findings would be extremely helpful. Thank you for your time.
--
Best regards,
Setareh Shir-Koobi
British Columbia Institute of Technology
Forensics Investigation (Digital Forensics and Cybersecurity Option) program