Blue Team of One field notes · security

Home›Digital Forensics›OneDrive & SharePoint preservation

Section

OneDrive & SharePoint preservation

Preserving departed-employee OneDrive data and archived sites.

Deep diveAugust 13, 2026

The archived OneDrive and the billing trap

A departed employee's 400 GB OneDrive gets auto-archived; recovering it without switching on a tenant-wide recurring charge is the real skill.

Read →