Thorne ejected the drive using the "Safely Remove Hardware" protocol. This command ensured that no pending write operations were active. If he had simply yanked it out while the computer was indexing, he could have corrupted the Master Boot Record, turning evidence into digital gibberish.
Click the Finder icon (the smiling face) on your Dock. open usb drive
Double-click your USB drive icon under the Devices and drives section. How to Open a USB Drive on macOS Thorne ejected the drive using the "Safely Remove
Most people think a USB drive is a solid block, but inside this plastic shell was a printed circuit board (PCB), a controller chip, and a NAND flash memory chip. The controller was the brain; the NAND was the warehouse. Click the Finder icon (the smiling face) on your Dock
Thorne moved to the far side of the room to a machine known as "The Sandbox." This was an air-gapped computer—a machine permanently severed from the internet and the police department's main network.
Thorne didn't double-click the icon. Double-clicking executes defaults, and executing defaults on unknown code is suicide. Instead, he opened a hex editor—a program that displays the raw binary data of the drive, stripping away the friendly icons and file names.
