Recycle bin files o...
 
Notifications
Clear all

Recycle bin files on USB conundrum

2 Posts
1 Users
0 Likes
491 Views
4rensicTX
(@4rensictx)
Posts: 3
New Member
Topic starter
 

Have a read-only external USB stick with a copy of an imaged recycle bin.

 

The goal is to pass off USB stick to an attorney for review of recycle bin $R files.

 

WIN10 forensic laptop (A) recycle bin is empty, no software running.

 

When plugged into the forensic laptop, I can navigate via File Explorer to the recycle bin folders and files.

 

I can open the $R files and SID of users for 2 user accounts.

 

I properly eject USB stick and connect to another laptop (B) before passing it off to the attorney.

 

Laptop (B) is my day-to-day use laptop.

 

The recycle bin on laptop (B) is empty.

 

Laptop (B) is a WIN10 machine.

 

When I plug USB stick into the laptop (B) and navigate to recycle bin files, no SIDs, instead recycle bin icons.

 

When I click on the recycle bin icons, no content.

Again access to the recycle bin contents for review purposes is the end goal

Any ideas on how to resolve this?

 
Posted : 09/02/2022 3:37 pm
4rensicTX
(@4rensictx)
Posts: 3
New Member
Topic starter
 

UPDATE:  Appears that McAfee/or a setting on laptop was interfering as I could access the on a personal machine.

 
Posted : 24/03/2022 4:12 pm
Share:
Share to...