On Fri 07 Sep 2018 at 14:46:31 (-0500), Richard Owlett wrote:
[snip]
In the appropriate time period I know that there were no more than a
dozen files created/destroyed/renamed.
This would be very useful in future if you were unsure of the name and
location of the file sporting its new name. One way to locate those
files is like this:
$ find / -type f -cmin -2880 -a -cmin +1440 -print | less
will find files whose status information was modified between 24 and
48 hours ago. If you renamed a file, that should affect the ctime.
You can choose your numbers appropriately and focus the search by
changing / to something more specific, or even adding -name \*.ext
where ext is the known extension.