Aug 18, 2026
When endpoint malware is encrypting a synced OneDrive or Google Drive folder: isolate the PC, stop the cloud copy from updating, then restore from version history or Recycle Bin to a side path.
Aug 14, 2026
Timed runbook when an entire SharePoint site, document library, or Google Shared Drive is gone — freeze, confirm scope, restore the container, then verify. Do not treat it as a single-file delete.
Aug 12, 2026
A tabletop-plus-live exercise: pick one folder or mailbox, restore to a side path, open real files, time the work, and write down what broke — without touching production.
Jan 27, 2026
What is still possible after Trash, Recycle Bin, Recoverable Items, and deleted-user windows expire — and what is genuinely gone without an independent copy.
Jan 13, 2026
What happens to Exchange Online mail when HR deletes an account: the deleted-user window, restoring the user vs converting to a shared mailbox, and how Google Workspace compares.
Oct 7, 2025
Desktop clients create ‘lost file’ tickets that are really caches, conflict copies, selective sync, or path-length failures. A diagnostic path before you declare data loss.
Sep 16, 2025
An incident playbook for IT: freeze further damage, classify the loss, use Trash and Recycle Bin correctly, and restore to a side path before you overwrite anything live.
Jul 8, 2025
When an overwrite, not a delete, ruined a document: how version history works, where it fails, and how to restore to a side path instead of blindly reverting live files.
Jun 17, 2025
A practical map of OneDrive/SharePoint Recycle Bin stages and Exchange Recoverable Items — typical time windows, who can restore, and what those windows are not.