It was not a routine login.
The account had attempted to open the Redhaven inspection schedule less than two minutes after Harris had questioned Grant about the investigation.
Harris checked the access history again.
The request had been denied automatically because the inspection file had been temporarily restricted.
He leaned back in his chair.
For several seconds, he considered whether there could be an innocent explanation.
Grant had legitimate access to many logistics records. He had worked with the regional review team for years. He understood the system and had frequently accessed schedules when coordinating inspections.
But the timing was difficult to ignore.
Harris picked up his telephone.
COLONEL HARRIS: "I need the cybersecurity duty officer in my office immediately."
A few minutes later, a technical specialist entered.
SPECIALIST: "You requested me, Colonel?"
HARRIS: "I need you to examine an access attempt involving the Redhaven inspection schedule."
He turned the monitor toward the specialist.
HARRIS: "This request came from Colonel Grant's account. I want to know whether it was made from his assigned workstation."
The specialist examined the details.
SPECIALIST: "I'll need to compare the login records with the network authentication history."
HARRIS: "Do that. Preserve the original logs. Don't change the permissions or overwrite anything until the evidence has been secured."
SPECIALIST: "Understood."
Harris opened another file.
It contained the names of everyone who had received the original inspection schedule.
There were six people.
Marcus Ellison.
Andrew Harris.
Michael Grant.
Two logistics officers.
And a civilian compliance coordinator.
The list was short.
If the schedule had been shared outside the authorized group, identifying the source should not be impossible.
But Harris knew that the investigation had become more complicated than a simple unauthorized login.
Someone had apparently known where Marcus would be, what he intended to inspect, and when he would arrive.
The workers at the depot had been preparing to move the containers before he reached the property.
Then, when Marcus questioned them, someone had contacted local law enforcement.
The sheriff had arrested the very person who was trying to prevent the equipment from disappearing.
Harris looked at the clock.
5:29 p.m.
He immediately called Thomas Bennett in Redhaven.
THOMAS BENNETT: "Bennett speaking."
COLONEL HARRIS: "Thomas, we have a possible unauthorized access attempt involving Colonel Grant's account."
BENNETT: "Was the inspection schedule accessed?"
HARRIS: "The system blocked the latest request. We're checking the earlier access history."
BENNETT: "Do you believe Grant knew about the inspection?"
HARRIS: "He had legitimate access to the schedule. I need evidence before making any conclusions."
BENNETT: "Understood."
HARRIS: "Has the witness been located?"
BENNETT: "We're working on it. Her name is Patricia Bennett. She contacted the sheriff's office and claimed to possess the original transfer records."
HARRIS: "Keep her separate from the local contractor. If she has original documents, make sure they are preserved properly."
BENNETT: "We'll handle that."
Harris paused.
HARRIS: "And Thomas, how is General Ellison?"
BENNETT: "He's safe. The county attorney is reviewing the detention. He has not been physically harmed."
HARRIS: "Tell him I am coming to Redhaven."
BENNETT: "Will do."
The call ended.
Harris stood up and walked toward the window.
The sun was beginning to disappear behind the buildings.
He had known Marcus for more than fifteen years.
He had served alongside him during several difficult assignments and had watched him become one of the most respected officers in the logistics command.
Marcus was not a man who used his rank to intimidate people.
He rarely raised his voice.
He preferred documentation, verification, and clear procedures.
That was why the incident troubled Harris.
Marcus had gone to Redhaven to examine a problem.
Now he was being held by a local sheriff while the people responsible for the missing equipment might still be operating freely.
Harris returned to his desk.
He opened the secure communications system and prepared to travel.
Meanwhile, at the Redhaven County Sheriff's Office, Thomas Bennett was speaking with Natalie Brooks.
THOMAS BENNETT: "I need the original telephone recording from the woman who called about the transfer documents."
NATALIE: "The call was saved in the dispatch system."
BENNETT: "Can you identify the exact time?"
Natalie checked the log.
"Five twelve p.m."
Bennett looked at the entry.
THOMAS BENNETT: "Did she provide a callback number?"
NATALIE: "Yes. I saved it before the call disconnected."
BENNETT: "Did she give you a location?"
"She said she worked for Redhaven Transportation Services."
Bennett wrote down the information.
"Did she sound frightened?"
Natalie thought for a moment.
"She sounded nervous. She kept lowering her voice."
"Did she say why?"
"No. But she said someone might be trying to make the original documents disappear."
Bennett looked toward the sheriff's office.
"Did she specifically mention Charles Bennett?"
"Yes."
Thomas nodded.
He turned toward Captain Lewis.
THOMAS BENNETT: "Let's verify her employment and find out whether she is still at the transportation company."
Captain Lewis began making calls.
Within twenty minutes, the investigators had established that Patricia Bennett was a records administrator at Redhaven Transportation Services.
She had worked there for almost nine years.
Her responsibilities included maintaining vehicle movement records, equipment transfer forms, and warehouse delivery documents.
She was not related to Charles Bennett.
The shared surname was coincidental.
More importantly, her position gave her access to the original records associated with the disputed shipment.