I have see a strange issue a few times at my client. They are using SharePoint Online and mainly using the syncronisation option to sync the files locally using OneDrive.
Sometimes files are deleted from SharePoint seemingly by the user - even if the user wasn't working that particular day.
The latests case is a few files edited the 15th. The user saves the files and leave work only to come back the 19th. Now back at the office this monday (19th) the files are gone from both Onedrive and SharePoint. The files can be found in the recycle bin, marked as deleted by the user the 16th (very early morning). Knowing the user he for sure wasn't working that day, and most cretainly not at that time. The pc was shut down and stayed in the office.
Unfortunately auditing hasn't been turned on for the site collection.
Does anybody have any idea what's causing this?