Title: XFT: a forensic toolkit for the original Xbox game console

Authors: David Collins

Addresses: Department of Computer Science, Sam Houston State University, P.O. Box 2090, Huntsville, TX 77341, USA

Abstract: The array of electronic storage devices is staggering in both number and type. The most common of these are in the form of fixed and removable media. Included are cell phones, PDA|s and game consoles. These devices not only provide a convenient means to store data of all kinds, but they also provide a way for criminals to possess and hide illegal material. XFT is a utility that will mount an image of a FATX file system, allowing full traversal of the directory structure. Once the Xbox file system is mounted, the analyst can use shell commands to browse the directory tree, open files, view files in hex editor mode, list the contents of the current directory in short or long mode and expand the current directory to list all associated subdirectories and files. XFT will also record sessions for playback in a court of law.

Keywords: Xbox file system; XFT game console; forensic toolkit; FATX; digital forensics; electronic security; electronic storage devices.

DOI: 10.1504/IJESDF.2009.024903

International Journal of Electronic Security and Digital Forensics, 2009 Vol.2 No.2, pp.199 - 205

Published online: 03 May 2009 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article