They developed probable cause.

Obtained legal process.

Forensic specialists imaged devices and cloud records.

Marcus ran a cybersecurity company.

He understood logs.

Backups.

Deletion.

Retention.