Re: Actual case aside
@FF22
If they have logs or records of what was written to the drive then they have a pretty good idea of what is (or was) on it. If they know the hashes (which they apparently do) of some of the files recorded as being saved to that disc then they know it contains (or contained) the files which have those hashes.