Case File Library · Volume Thirty-Six

Cases 1751–1800

Volume Thirty-Six opens site eight, and it is about the decisions people make before anyone knows what is wrong. The first move is nearly always made with the least information there will ever be — and it is frequently the move that decides the outcome. Here a man declines the offer to initialise a stick and preserves everything by doing nothing. Another opens his drive to look inside, which answers one question and creates two more. A repair shop attempts the backup nobody had made, and the attempt is what finishes the drive. Someone buys two enclosures to test a theory that a third would not have settled either. Alongside them are the observations that decide what happens next: a tone that means resistance rather than a click that means position, a file list that is not evidence the files can be read, old files coming back while current ones do not, and an index that survived while everything it describes did not. Two cases open new ground for this archive — boxes of discs from the 1980s, where media, reader and file format are three dependencies that aged at different rates, and a card required as evidence, where how it is handled counts as much as whether it reads. At case 1800, an owner left unable to prove who he is to anything after two devices failed in the same week — and needing not his files but an ability. Every case is a genuine enquiry, its identifying details changed or removed, its lesson kept whole. Every recovery names its instruments: the ACE Lab PC-3000 Express with Data Extractor and PC-3000 Flash with Spider Board, MRT Ultra, Atola TaskForce 2 and Atola Insight Forensic, DeepSpar USB Stabilizer 10Gb and RapidSpar, the Rusolut Visual NAND Reconstructor, Flash Extractor, Passware Kit Forensic, and OSForensics.