Continuing from Part 2, I cringe and recover the next drive in the stack, against just looking to recover files from the drive…
This was a hard drive that definitely came from a Dell computer, judging by the “Dell” folder that was full of drivers. Plus it was Windows 10, and had at least 1 feature update – OR was upgraded from Windows 7 as shown by the $Windows.bt folder.
This was one of the later drives that I actually ran across and it looks like it was from the family laptop that only got turned on once in a while. There were no document or anything else major of note, and I skipped applying any sort of Forensics against it because at this point – I was just happy to see a machine that looked at least part way clean.
2 down, 4 to go. Onward to .. something… Tomorrow!