Submitting Campus

Daytona Beach


Security Studies & International Affairs

Document Type

Book Chapter

Publication/Presentation Date



Microsoft’s Xbox game console can be modified to run additional operating systems, enabling it to store gigabytes of non-game related files and run various computer services. Little has been published, however, on procedures for determining whether or not an Xbox console has been modified, for creating a forensic duplicate, and for conducting a forensic investigation. Given the growing popularity of Xbox systems, it is important to understand how to identify, image and examine these devices while reducing the potential of corrupting the media. This paper discusses Xbox forensics and provides a set of forensically-sound procedures for analyzing Xbox consoles.

Publication Title

Advances in Digital Forensics III




Additional Information

Dr. Craiger was not affiliated with Embry-Riddle Aeronautical University at the time this paper was written.