Recycle bin files o...
 
Notifications
Clear all

Recycle bin files on USB conundrum

2 Posts
1 Users
0 Reactions
1,695 Views
(@4rensictx)
Eminent Member
Joined: 3 years ago
Posts: 11
Topic starter  

Have a read-only external USB stick with a copy of an imaged recycle bin.

 

The goal is to pass off USB stick to an attorney for review of recycle bin $R files.

 

WIN10 forensic laptop (A) recycle bin is empty, no software running.

 

When plugged into the forensic laptop, I can navigate via File Explorer to the recycle bin folders and files.

 

I can open the $R files and SID of users for 2 user accounts.

 

I properly eject USB stick and connect to another laptop (B) before passing it off to the attorney.

 

Laptop (B) is my day-to-day use laptop.

 

The recycle bin on laptop (B) is empty.

 

Laptop (B) is a WIN10 machine.

 

When I plug USB stick into the laptop (B) and navigate to recycle bin files, no SIDs, instead recycle bin icons.

 

When I click on the recycle bin icons, no content.

Again access to the recycle bin contents for review purposes is the end goal

Any ideas on how to resolve this?


   
Quote
(@4rensictx)
Eminent Member
Joined: 3 years ago
Posts: 11
Topic starter  

UPDATE:  Appears that McAfee/or a setting on laptop was interfering as I could access the on a personal machine.


   
ReplyQuote
Share: