[LINK] Microsoft One Drive

[Karl Auer]

On Wed, 2023-08-16 at 10:39 +0000, Stephen Loosley wrote:
> our relevant drive memory has gone UP? Now there is only 10 Gb on the
> main drive?

There's a good chance the missing space is the missing files, then.

> This new user group wasn’t there last night, I’m certain of that.
> Villainy !!

Indeed. And this may actually be an attack.

> So, looks like our next step is to create a One Drive
> Account, log into it, and see if they are there, I guess.

No! Your FIRST step, if a drive may contain the only copy of
irreplaceable information, is to turn the power off to that computer,
remove all its drives, and get them to a professional for inspection
and possible recovery. By hand or by trusted courier. Any continued use
of the drives, especially of the boot disk, risks overwriting the data
you want to recover. You'll need any drive encryption keys if the
drives are encrypted.

If you are good at this sort of thing, and you are certain that the
drives are not physically damaged, you might put the drives in USB
enclosures, mount them read-only, and take block-for-block backups of
them. Then see what you can recover from the copies. Do this on a
different machine, of course.

I have heard only good reports about Payam Data Recovery in Sydney.

Your THIRD step is to look around on OneDrive.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer