Tales of eBay – Part 5

Keeping going from Part 4 yesterday and the next drive off the stack. Things start getting spicy here. Let me get the pictures and I will explain more …

The drive auto ran when it was connected to my laptop and shows very empty
But in past looks with the Hex Editor, there is data
NTFS Recover works its magic and brings back a whole lot of stuff …
… in a only a few drive structures

At this point I stop with the images because from this point, things go down hill very rapidly. This was another drive that I had looked at later in the adventure and became quickly horrified by what I turned up. There was just about no OPSEC (Operation Security, aka “Clean up your stuff”) before this drive was just formatted and thrown up for sale. The quick list of content recovered included …

  • Adult Images / Videos
  • Family pictures
  • Vacation and Holiday event pictures
  • Legal documents from family court
  • Divorce papers and “Sanitized” divorce papers (the names were changed to protect … someone)
  • Tax documents
  • Cisco test prep materials
  • Hardware Manuals
  • Outlook email archives (some were fairly large, over 1+GB)

Honestly, this was not a good discovery and I just kept repeating “Why am I able to see ANY OF this ?!” The part that bothered me the most was that the name I referred to yesterday was the same name that was turning up in these drives. Somehow both these drives are connected to the same person.

5 drives down, 2 to go. This experiment is rough.

PHP Code Snippets Powered By : XYZScripts.com