PSP analysis

http//www.lmgtfy.com/?q=p2p+forensics

The psp does have internal memory. It saves a number of things. It saves internet history as well as settings for wireless. When you choose to connect to a wireless network, you could choose an auto function where it queries the access point for the settings, or you could set it up manually. This could be useful when trying to get a mapping of networks that the person connected to. From that information you could find out where the wireless network would or could be located.

The browser in the psp does save internet cache. It does have the option of deleting the cache and cookies and even certificates that it downloaded. This could become a problem when trying to analyze the internet history, cache, etc. You should not have a problem with this. I was an owner of 2 of them. You could say I am security conscious but the inconvenience of typing the websites on the psp was not worth the hassle. I left the history intact.

One more issue that you will find is that the psp allows you to connect to the playstation store where you could download music, videos and other interesting media. In order to to do this, however, you need to set up an account and type in your credit card number. The next time you log into the store and make a purchase, the credit card number is automatically saved and you could just make the purchase. This leads me to believe that somewhere there is a temp file or maybe cookie that stores that credit card number as well as other personal identifiable information (sort of like a profile).

Thanks.

I'll let you know I get on and if there is anything strange.

Always good to put stuff up here for others to reference in the future. I'd say its straightforward enough!

Is it a PSP or a PSP Go (The one with the sliding screen)

I looked at one of the original PSPs some time ago and the internet history etc was stored only on the MemoryStick.

The PSP Go on the other hand has 16GB of onboard flash memory, which can be expanded using M2 MemorySticks.

Hope this helps.

http//www.lmgtfy.com/?q=p2p+forensics

p2p != PSP

OK… failed at the first hurdle! lol

I got up this morning…and I knew I should have brought my charger with me for my own PSP as the officers who bag these things ALWAYS forget the cables! ) Oh well… I have to go at it on monday as we don't have one in own lab. (and it wont charge via USB… dang!)

But so far I have imaged the 1GB stick in it and it looks like its been hacked, there is a load of firmware and emulator stuff on the card. Dunno if this will make my life easier or harder?

JDCoulthard, as for the make, its a fat one (as they call em) its the PSP-1000

Hopefully come Monday I will remember my charger and we can see if there is anything on it. I doubt it. I did his XBOX HDD yesterday and there was nothing on that, which is another ballache for another day as EnCase just picks it up as Unallocated space. I managed to get hold of Xplorer360 but that didn't tell me much either… Damn games consoles! Note to criminals Just use a PC and clearly mark all your folders please! D

I will have a play with my PSP later. I first looked at the internet history when the browser was installed with firmware 2.5. I seem to recall the internet history was quite easy to read and the cache, whilst small, could be easily carved with EnCase or similar.

Its been a while since I updated, so I will have a look and see if things have changed much.

http//www.lmgtfy.com/?q=p2p+forensics

Is this about P2P "Peer to Peer"
http//www.computer-forensics.co.uk/computer-forensics-forums/forumdisplay.php?26-P2P-Forensics
or about PSP "PlayStation Portable"
http//www.forensicswiki.org/wiki/PSP
? roll wink
jaclaz

I've never looked at a PSP myself, but this might give you some pointers
http//forensicsfromthesausagefactory.blogspot.com/2009/11/sony-psp-internet-history.html