At 9:12 p.m., Marcus Bell identified the first account that had attempted to access the anonymous sender's records.
It belonged to a senior network administrator named Thomas Greer.
Greer had worked in federal communications for seventeen years. His responsibilities included emergency routing, system authentication, and oversight of the regional network that had been used to transmit the false directive.
He was not a field agent. He had never been assigned to Elena's investigation.
Yet his account had appeared repeatedly in the records.
"How many suspicious events are associated with him?" Elena asked.
Bell examined the report.
"Seven confirmed access events across three systems. Four involved the emergency communications backbone. Two involved administrative credentials. The seventh is the attempt we just detected."
"Did he authorize the original configuration update?"
"His account participated in the approval chain. We don't know whether he initiated it."
Morgan crossed her arms.
"That sounds like a pattern."
"It is," Bell replied. "But we need to distinguish between actions he performed and actions performed using his account."
Elena nodded.
"Find out whether Greer is on duty."
"He is."
"Where?"
"Regional communications center."
Elena considered the information.
If Greer was responsible for the false directive, he might be able to explain how the system had been manipulated. But confronting him too early could alert other participants and give them an opportunity to destroy evidence.
She contacted Shaw and requested authorization for an independent interview, supported by the relevant records and conducted through the appropriate investigative process.
Shaw approved the request.
At 9:47 p.m., Elena and Morgan entered a secure conference room at the regional communications center. Greer was already waiting with an attorney and a representative from his department.
He was a thin man in his late fifties, with silver hair and tired eyes. His hands were folded on the table, and a paper cup of untouched coffee sat beside him.
"Mr. Greer," Morgan began, "we're investigating unauthorized activity involving the regional communications backbone. Your account appears in several relevant records."
Greer looked at Elena.
"I was told this concerned the incident on Interstate 87."
"It does," Elena replied.
"I had nothing to do with the traffic stop."
"Did you authorize a configuration update affecting federal credential alerts?"
"I approve dozens of routine updates."
"Did you approve this one?"
Greer hesitated.
"I would need to see the record."
Morgan slid a copy of the relevant authorization summary across the table.
Greer read it.
His face changed.
"I didn't approve this."
"Your account is listed in the approval chain," Morgan said.
"Then someone used my credentials."
"Did you report them compromised?"
"No."
"Why not?"
"Because I didn't know."
Elena studied him.
"Mr. Greer, the system shows your account accessing the emergency backbone at 8:31 p.m. tonight. That access was directed toward an internal account associated with an anonymous warning about this investigation."
Greer looked up sharply.
"What warning?"
Elena did not show him the message.
"Why would someone use your account to search for the sender?"
"I don't know."
"Could someone access your account remotely?"
"Only with the proper authentication."
"Could they obtain the authentication through administrative delegation?"
Greer hesitated.
"In certain circumstances."
"Who has that authority?"
"Senior network security administrators. A limited number of executive accounts can authorize emergency access."
"Does Vivian Cole have that authority?"
Greer looked at his attorney.
His attorney conferred with him briefly before he answered.
"Her office can request emergency access. It cannot independently approve every technical action."
"Who can?"
"The system's designated emergency controller."
"Who holds that role?"
Greer swallowed.
"Deputy Commissioner Adrian Vale is one of the executive sponsors. The actual technical authority is assigned to the network director."
"Who is the network director?"
"Thomas Greer."
Silence filled the room.
Morgan glanced at Elena.
Greer looked suddenly older.
"Mr. Greer," Elena said, "did you activate the emergency authorization this morning?"
"No."
"Did you know it remained active after the communications exercise ended?"
"I believed it had been disabled."
"Who verified that?"
Greer looked down.
"I signed the closure report."
"Did you personally test the shutdown?"
"No."
"Who did?"
He did not answer.
Morgan waited.
Finally, Greer said, "Vivian Cole's office requested that we leave a limited administrative pathway available. They said it was necessary for a future resilience exercise."
"Was that request documented?"
"There was an internal memorandum."
"Did you verify that the memorandum had been approved?"
Greer closed his eyes.
"No."
Elena felt the significance of the admission.
The emergency pathway had not remained active through a simple technical oversight. Someone had requested an exception, and Greer had accepted the request without completing the necessary verification.
That still did not prove Cole had ordered the highway stop.
But it established that her office had played a role in keeping the compromised system available.
"Why didn't you verify the memorandum?" Elena asked.
Greer looked miserable.
"Because it came through an executive channel. I was told the approval was already complete."
"By whom?"
"An administrator in Cole's office."
"Name?"
"Peter Lang."
Morgan wrote it down.
"Did you speak to Lang directly?"
"Several times."
"Did he ever instruct you to alter the credential alert system?"
"No. He instructed me to ensure that the emergency pathway remained available."
"Did he explain why?"
"He said it was necessary to identify unauthorized federal access before sensitive information could leave the region."
Elena and Morgan exchanged a glance.
The explanation sounded plausible.
It was also almost exactly the justification someone might use to conceal an unauthorized interception program.
"Did you know that the pathway had been used to issue a directive to Officer Kessler?" Elena asked.
"No."
"Did you know that the directive referenced the federal regional coordination office without authorization?"
"No."
"Did you know that someone attempted to access the preserved evidence terminal after the highway incident?"
Greer shook his head.
"No."
Elena leaned forward slightly.
"Then help us understand who had the ability to do those things."
Greer took a slow breath.
"The emergency pathway could be used by the network director, but the executive override required an additional credential. Only a few people had access to that credential."
"Who?"
"Deputy Commissioner Vale. Assistant Director Cole. And one person in the federal security directorate."
"Name?"
Greer looked at the attorney again.
After a short consultation, he answered.
"Director Samuel Rourke."
Elena knew the name.
Rourke supervised a division responsible for protecting sensitive government communications. His office had provided technical support to Elena's investigation during its earliest phase.
He had personally assured Shaw that the network was secure.
If he had access to the override credential, he could have helped manipulate the system while simultaneously directing the investigation away from it.
But the possibility of his involvement was not proof.
Elena stood.
"Mr. Greer, we appreciate your cooperation. We may need additional interviews once we verify your statements."
Greer looked at her desperately.
"Agent Cross, I never wanted anyone hurt."
"I understand."
"Do you?"
She paused.
"I understand that you may have believed you were protecting a legitimate process. But people can cause enormous harm when they stop asking whether the authority they are following is real."
Greer lowered his eyes.
The interview ended.
Outside the conference room, Morgan spoke quietly.
"We have three senior officials connected to the emergency pathway, a compromised administrator, and an executive office that requested the pathway remain active."
"Yes."
"That's a serious conspiracy."
"It's a serious possibility."
Morgan gave her a tired look.
"Do you ever get tired of qualifying everything?"
"Every day."
Elena glanced at the corridor leading toward the network control room.
"Certainty is easy when you don't have to prove anything. Our job is to prove it."
Her phone vibrated.
A message had arrived from Naomi Shaw.
We have confirmed that Vivian Cole's office received an authenticated warning about unauthorized use of the emergency backbone three weeks ago.
Elena read it twice.
Three weeks earlier, Cole had been warned that the system might be compromised.
Instead of disabling the pathway, someone in her office had requested that it remain available.
Elena sent a reply.
Who submitted the warning?
Shaw responded almost immediately.
Thomas Greer.
Elena stopped walking.
Greer had reported the risk.
Someone had chosen not to act.
And now the same system had been used to place a federal agent under threat of an unlawful detention.
Elena looked at Morgan.
"Get the original warning report. Every version of it."
Morgan's expression sharpened.
"What are you looking for?"
"The moment someone decided that a known vulnerability was more useful than a secure system."
She turned toward the exit.
"And find Peter Lang."
Because the person who had delivered the request from Cole's office might know whether the emergency pathway had been preserved to protect the agency—or to give the conspiracy a weapon.