"These are the cloud originals?" Ward asked.
"They are provider-stored copies with metadata consistent with the reported upload times," the examiner answered. "We also have a forensic image of the seized hub. We'll compare hashes and recording structures to determine whether any content differs."
He opened the corresponding files from the local device. The versions matched the cloud records, including the audio, the camera transitions, and the timestamps relevant to the disputed encounters. There was no evidence that Malik had altered the home-security footage after the confrontations or fabricated the missing seconds from Vivien's clip. Martinez added the finding to her notes without a flourish.
"The accusation that these videos were manufactured is not supported by the forensic comparison," she said. "That does not decide every allegation in the case, but it establishes that these particular recordings are authentic copies of the system's original records."
Malik exhaled slowly. He had known the material was intact, yet there was a difference between believing the evidence would survive examination and hearing an independent specialist say that it had. The evidence did not make the humiliating week disappear, nor did it restore the days he had spent on administrative leave. But it removed a carefully constructed doubt about the one record that had stayed with him even when his position was temporarily taken away.
The next phase concerned Halbrook's body-camera records. Martinez placed a timeline on the monitor showing the preservation instruction, the upload of the original encounter, and subsequent access to that file. A departmental account assigned to Halbrook had opened the recording after the preservation notice, created an export, and later attempted an operation that the system had blocked. The original protected version remained available in the server archive.
"The export he submitted was shorter than the preserved original," Martinez explained. "The missing portion includes the beginning of physical contact and part of the property-verification discussion. The metadata and system logs are consistent with a version being selected or produced after the hold was issued."
Ward's jaw tightened. "So the version that accompanied his statement did not show the actions that contradict his statement."
"Correct. We also have an attempted deletion event tied to his account. That operation did not remove the protected original, but it remains logged. We are verifying the device used and the identity of the person operating it before concluding who performed each action."
Moreno's preserved audit copies helped establish that the critical logs existed before the altered export was submitted for review. The records supervisor's official evidence receipt provided an independent time reference, and the system's permissions history showed who could access the files. What had once appeared to be a confusing collection of recordings now formed a detailed sequence of decisions. It was not one magically revealing video but a pattern of records that could be checked against one another.
The investigators then played Halbrook's original body-camera footage of the first detention. Malik saw himself standing at the porch step, holding his hands in view and explaining that the certified deed was in the car. He heard Vivien repeatedly insist that Margaret Whitmore could not have sold the house to someone like him. He saw Moreno request a property check, and then he watched Halbrook approach, grab his arm, and force him against the sedan while the younger officer tried to keep dispatch on the line.