{"id":1364,"date":"2024-10-06T14:52:56","date_gmt":"2024-10-06T20:52:56","guid":{"rendered":"https:\/\/fallingstuff.net\/blog\/?p=1364"},"modified":"2025-10-24T04:18:34","modified_gmt":"2025-10-24T10:18:34","slug":"tales-of-ebay-part-2","status":"publish","type":"post","link":"https:\/\/fallingworks.com\/blog\/2024\/10\/06\/tales-of-ebay-part-2\/","title":{"rendered":"Tales of eBay – Part 2"},"content":{"rendered":"\n

After the last Tales of eBay<\/a> I got to thinking, I wonder if I can find other drives that were not cleaned … Or … better put how MANY I can find. So off to eBay I went to buy more drives than I needed to answer this question, because I put bids on auctions not expecting to win .. and did. I set out on this adventure with a total of 23 drives and a goal to see IF<\/strong> I could recover anything from an erased drive sold on eBay. Then the scope crept a bit to include NTFS Recover and Forensics practice. Then the scope crept more to include pairing up similar drives to attempt to swap platters (in the future). <\/p>\n\n\n\n

After way too long of letting tools run, I decided after a few hundred thousand files, that I had enough material to answer my original question. In retrospect, this project took way too long and got way too complicated for a casual experiment. I settled on 6 drives out of the batch and will be putting out a post on each one to make a full week of posts on this (sloppy) Adventure in Data Recovery. <\/p>\n\n\n\n

I start with the drive where I remembered to snag the screenshots from the searches with NTFS Recovery before it processed the files for recovery.<\/p>\n\n\n\n

\"\"
Selecting All the Files to recover<\/figcaption><\/figure>\n\n\n\n
\"\"
… and we are off to the races <\/figcaption><\/figure>\n\n\n\n
\"\"
Time to recover and see what is there <\/figcaption><\/figure>\n\n\n\n
\"\"
The last folder is just all the loose files, the other 2 are the structure as it was on the drive<\/figcaption><\/figure>\n\n\n\n
\"\"
… and as expected, there is stuff not removed. <\/figcaption><\/figure>\n\n\n\n

My point of this exercise is not to call out SPECIFIC data but just to say that things were not removed like they should have been. However just a little bit of what did not get removed included <\/p>\n\n\n\n