XFT: a forensic toolkit for the original Xbox game console

摘要

The array of electronic storage devices is staggering in both number and type. The most common of these are in the form of fixed and removable media. Included are cell phones, PDA's and game consoles. These devices not only provide a convenient means to store data of all kinds, but they also provide a way for criminals to possess and hide illegal material. XFT is a utility that will mount an image of a F ATX file system, allowing full traversal of the directory structure. Once the Xbox file system is mounted, the analyst can use shell commands to browse the directory tree, open files, view files in hex editor mode, list the contents of the current directory in short or long mode and expand the current directory to list all associated subdirectories and files. XFT will also record sessions for playback in a court of law.