On Sat, 5 May 2018 21:23:32 -0400, Nancy Young wrote:

> On 5/5/2018 7:38 PM, Janet wrote:
>
>> Covering his tracks because he'd been checking their financial
>> affairs/making some illegal use of the computers/ interfering with
>> online accounts and banking.
>
> I don't get how wiping out the backups was necessary for that
> purpose. Aside from spite, was there information or a document
> he wanted wiped out for good?

You can't even format the Windows OS disk/partition while the system
is running. Windows partition would have to unmounted first.
Which, providing he knows how to do it and has the right media,
would add at least another 15 minutes onto his alleged early morning
covert computer carnage.

Another reason it just doesn't make sense.

I would check the router/gateway logs to see if the computers were
turned on in the middle of the night and were assigned IP addresses.
It won't PROVE anything if the entries are there. But if they
aren't there it 100% disproves his theory. Most gateways routers
will log that info at their default level. Unless you have Google
Fiber where there are practically no options.

I wonder if the suspect has been confronted with the accusation.

-sw