Xbox 360: a digital forensic investigation of the hard disk drive

Konstantinos Xynos, Andrew Blyth, Iain Sutherland, S. Harries, Gareth Davies

Research output: Contribution to journalArticlepeer-review


In recent years an increase in the complexity of games has subsequently demanded an upscale of the hardware in the consoles required to run them. It is not uncommon for games consoles to now feature many pieces of hardware similar to those found in a standard personal computer. In terms of forensics the most significant inclusion in todays games consoles is the storage media, whether they are flash based memory cards, or electro-mechanical hard disk drives. When combined with networks, particularly the internet, this inbuilt storage gives games consoles a host of new features, including the downloading of games, updating of console software/firmware, streaming media from different network locations, activities centred around social networking and usually involving user specific content being saved on the consoles storage media. This paper will look at analyzing the SATA hard disk drive contained in Microsofts Xbox 360 games console.We present our findings and provide suggested basic guidelines for future investigations to be able to recover stored remnants of information from the drive.
Original languageEnglish
Pages (from-to)104 - 111
Number of pages7
JournalDigital Investigation
Issue number3-4
Publication statusPublished - 31 Mar 2010


  • Microsoft Xbox 360
  • digital forensics
  • residual data
  • games
  • hard disk drive


Dive into the research topics of 'Xbox 360: a digital forensic investigation of the hard disk drive'. Together they form a unique fingerprint.

Cite this