Military Defense Investigation Knowledge Base
Military Defense Investigation Authority Publication
Authority Publication No. DI-096
Recovering Deleted or Ephemeral Messages and Identifying Available Cloud Backups
Independent Military Defense Investigations
Supporting Attorneys, Service Members, and Families
Publication Date: August 31, 2026
────────────────────────────────────────
Executive Summary
A deleted message is not always a lost message. In a military investigation, communications missing from one device may remain on a recipient's phone, linked computer, tablet, notification record, account export, or cloud backup.
Authority Publication DI-096 explains how a defense investigator maps every possible source before treating deletion as permanent loss. It addresses lawful preservation and production options, source attribution, timestamps, completeness, collection documentation, and the limitations of partial screenshots or recovered fragments.
The publication also emphasizes an essential legal boundary: lawful seizure of a device does not necessarily authorize every later forensic examination. Defense counsel must evaluate whether the scope and method of a subsequent search remained within the governing search authority.
A practical framework for locating deleted or disappearing communications, identifying available backups, documenting recovery methods, and testing what each source proves.
What readers will learn
- Map devices, accounts, custodians, backups, exports, and notification records.
- Preserve original evidence without altering the remaining data.
- Test attribution, timing, completeness, and message context.
- Document unsuccessful recovery efforts and unresolved limitations.
- Recognize when expanded forensic examination may require additional legal authority.
Who Should Read This Publication?
Military Defense Counsel
Use this publication to define the disputed communication, identify preservation or production needs, evaluate search scope, and direct a defensible digital-evidence investigation.
Defense Investigators
Learn how to build a source-and-custodian map, preserve originals, document collection methods, and distinguish complete conversations from partial or derivative records.
Service Members
Understand why deleting a message from one device may not remove every copy and why you should preserve devices and accounts rather than attempting further deletion or self-directed recovery.
Experts
Use the investigative record to determine what source material exists, what recovery methods are appropriate, and what conclusions the available artifacts can reliably support.
Families
Learn why well-intended searching, syncing, forwarding, or account access may change evidence and why preservation decisions should be coordinated with defense counsel.
Companion Video
This companion video expands on the investigative concepts presented in this Authority Publication through additional explanation, practical examples, and professional investigative insight.
About Michael West
The investigative guidance presented throughout these Authority Publications is based upon decades of professional experience conducting military, federal, criminal, civil, and private investigations. The principles discussed in these publications are drawn from real investigative work involving complex cases, witness development, evidence analysis, and factual case preparation.
Michael West has served as a Special Agent with the United States Air Force Office of Special Investigations (AFOSI) and the Department of Defense Inspector General, conducted federal background investigations, and spent decades working as a licensed private investigator supporting attorneys, businesses, service members, and private clients. Throughout his career, his work has focused on identifying facts, locating witnesses, analyzing evidence, and strengthening the factual foundation of legal cases through independent investigation.
The Military Defense Investigation Knowledge Base was created to share that investigative experience in a practical, understandable format. Its purpose is to help attorneys, service members, and families better understand the investigative process, ask more informed questions, and recognize opportunities where independent investigation may strengthen the defense.
Important Information
This Authority Publication is provided for educational and informational purposes and is intended to help readers better understand military defense investigations and the investigative process. It is based upon professional investigative experience and is designed to provide practical investigative insight rather than legal advice.
Every military case is unique. The investigative strategies, factual issues, and legal considerations applicable to one case may not apply to another. Readers should consult with a qualified attorney regarding legal rights, legal strategy, and decisions involving their individual circumstances.
Nothing contained in this publication should be interpreted as creating an attorney-client relationship or an investigator-client relationship. References to investigative techniques, procedures, or case examples are provided solely to illustrate investigative principles and should not be considered legal guidance.
Effective military defense is strengthened by informed legal representation supported by thorough factual investigation. The purpose of these Authority Publications is to help readers better understand that investigative process so they can communicate more effectively with qualified legal counsel and make informed decisions throughout the military justice process.