"Could someone have used his credentials without his knowledge?" Kim asked. Bell said that possibility would have to be examined before drawing any conclusion. The records did not yet prove who was responsible, but they undermined the claim that Marcus had personally altered those files at those times. Bell went on to review the history of the primary log and found evidence that the suspicious entries had been introduced after the initial case review.
The damaging entries carried the authorization of a supervisor account associated with Calvin Voss. That detail alone could have reflected delegated access, a shared workstation, or another explanation, but additional records narrowed the possibilities. The access occurred after Voss had been removed from oversight of the complaint inquiry. The accompanying administrative activity was inconsistent with routine record review.
Bell compared the modified report against the independent copies preserved under the department's enhanced evidence controls. Those copies retained the earlier entries showing Marcus's authorized access and the untouched status of the complaint findings. The submitted log had changed; the original record had not. A set of discrepancy findings grew into a report that neither side could safely ignore.
"The evidence supports deliberate manipulation of the record presented to Deputy Chief Morrison," Bell said. "The changes do not originate from Captain Ellison's authenticated access. They are associated with supervisory activity that occurred after the investigation began." Kim asked him to document every conclusion and every limitation. They would need the report to withstand hostile questioning, not merely settle an argument inside headquarters.
The forensic team also examined the digital recorder Marcus had transferred to Internal Affairs. The file contained ordinary background audio from his commute, the arrival of emergency lights, and the conversation that followed. Its sequence was consistent with a continuous recording rather than a collection of edited phrases. Technicians prepared an authenticated copy and a transcript, preserving the original device for the proper legal process.
There was no mysterious hidden confession, no dramatic discovery from an obscure technical trick. The strongest evidence remained the words Reigns had spoken confidently while he believed his own camera was off. "Five hundred dollars," his voice said. "Cash. Don't waste my time pretending you didn't hear." The recording also captured the threats that followed Marcus's refusal.
Kim listened through headphones, then removed them slowly. She had investigated officers who panicked during dangerous encounters and said foolish things in the aftermath. This was not that. The officer had paused, lowered his voice, and presented a financial demand as an alternative to official enforcement. He sounded comfortable enough that the conversation could have been any other part of his day.
Meanwhile, the county fraud investigators were pursuing the financial questions through their own legal process. Municipal records showed a pattern of payments to Voss Security Consulting; authorized banking evidence and witness interviews would be needed to establish whether those payments were disguised compensation for steering tows. The auditors did not assume every invoice was fake simply because the relationship looked suspicious. They compared the work claimed to the services actually performed.