Daily Blog #523: Forensic Lunch Test Kitchen 10/30/18 - Discussion on Recycle.Bin

Discussion on Recycle.Bin by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader,
         Another test kitchen focused on the Recycle.Bin tonight continuing last nights testing. Last night the question we were left with is what triggers the initial creation of the Recycle.Bin directory since its not part of the initial format. Here is what we learned:

  • Creating a file on the drive will trigger a Recycle.Bin
  • Waiting 5 minutes will create a Recycle.Bin even if no file is created
  • Waiting 5 minutes when a drive with a Recycle.Bin created from another system does not create a directory for that user's sid
I'm leaving the drive plugged into the second system to see if overnight the recycle bin creates the sid named directory.

You can watch the video below:

Also Read: Daily Blog #522

Post a Comment