Hi @Walter_C , Thanks for the update.

To be fair, did run some apt install commands to test CDC the day before I lost the workspace. Namely installing postgres & debezium and also unsuccessfully attempting airbyte. Though it was for educational purpose, I can understand that these actions may have been detected as suspicious activity. 

Anyway, I'm still hoping to recovers my notebooks. Though not yet conclusive I did receive my first answer from help@databricks.com