I wouldn't even play with that box anymore if there's a chance it has rare data on it. I'm in the process of developing some PC tools that interface with the debug monitor running on development Xboxes. One of the functions will allow for a full sector by sector copy of the disk which could be used later on for forensic analysis once subsequent tools are developed to read FATX images. Might be able to recover some deleted content eventually
Or remove the drive and clone it using Ghost with the /IR switch, ghost.exe /IR, then use the data recovery on the cloned drive. Xbox7887 if you find a decent FATX utility let me know.
Yup, although my utility will be geared specifically towards those that don't wish to open up their boxes. I'll likely end up building a decent FATX utility eventually, although for deleted file recovery, most of it will probably start out as signature-based scans against the raw image.
I could remove the drive at some point and run the dd command to make a block level image of the drive. Yet, we do not want to remove the drive. So this may never happen. We may buy a debug kit or another development kit and transfer the software there. It all depends on what my brother in law wants to do as it is his. If we want to continue to play it and research what is on the machine, that is his decision, but as of late it has been just sitting doing nothing.
Maybe boot into Linux on the 'box (Xebian has a live CD apparently) and dd over the network? No need to open up the case then.
It should, if devkits can actually boot that disc - I have no idea how it's signed or whatever. But I'm sure you'll find someone here that can help you with that (not me unfortunately) if it's a problem.
I have already backed up the data. I just don't have an image of the disk. And that really isn't that big of deal.
It could be a big deal though. Things can be recovered if they've been deleted, who knows what else may be lurking in the "free" space on that HDD... Please image the entire thing or have someone help you if you're not able. I'm not saying you have to release it, just keep a spare copy around in case something happens to the original drive.
I am a Linux System Administrator. I image it. I can boot linux and dd over ssh to another linux machine.