XBOX 360 Forensics

Chapter 8. Post–System Update Drive Artifacts

Information in this Chapter

•Examining the XBOX 360 hard drive using Xplorer360

•Getting started

•Xplorer360 and the post–system update drive

•Cache folder

•Content folder

•Mindex folder

This chapter provides a visual comparison of the two drive images using the Xplorer360 application. By examining the information both before and after in a GUI environment, it provides an examiner a quick reference guide. The Xplorer360 application provides a visual layout of the drive so that the changes are more evident when there is more than one drive image to review.

Key words

Xplorer360

Examining the XBOX 360 Hard Drive Using Xplorer360

We have been examining the XBOX 360 hard drive through standard forensic applications ...