Something wipes one of my share folder empty the second time

[daninet]

First time I tought it was my kid, he regularly plays "dad working" and just slams the keyboard while I'm leaving my PC for 5 seconds. It is happening second time and I have no idea where to start. Now it is surely not my kid. I have backup, nothing is lost, it is just very annoying. Nexcloud is the only thing having access to this share across all of my things but how exactly nexcloud would wipe a share?

I have home assistant VM (no access to this share), a bunch of dockers like everyone else from networking tools, databases and so on.

Is there a log where you can track deletion of files? I dont even know which way to go to start with the issue.