Chapter 8. Post–System Update Drive Artifacts
Information in this Chapter
This chapter provides a visual comparison of the two drive images using the Xplorer360 application. By examining the information both before and after in a GUI environment, it provides an examiner a quick reference guide. The Xplorer360 application provides a visual layout of the drive so that the changes are more evident when there is more than one drive image to review.
Examining the XBOX 360 Hard Drive Using Xplorer360
We have been examining the XBOX 360 hard drive through standard forensic applications ...