“Detective Marcus Vale.”
Ivory nodded.
“Did you compare the copy you received with a forensic image taken directly from the original server?”
“Yes.”
“May I ask when?”
“Three weeks ago.”
Ivory stopped.
The courtroom became still.
Three weeks ago.
The alleged transfer had occurred six weeks earlier.
“Dr. Hale,” she said, “when did the state first seize the server?”
“March 16.”
“Two days after the transfer?”
“Yes.”
“Who maintained custody of it?”
“The department.”
“Which department?”
“The Financial Crimes Division.”
“Under Detective Marcus Vale?”
“Yes.”
Ivory picked up a document.
“Dr. Hale, would you agree that a forensic copy can preserve the contents of a server at the time it is created, but it cannot tell you whether information on the original system was changed before the copy was made?”
Paul immediately stood.
“Objection. Misstates the evidence.”
“Sustained.”
Ivory nodded.
She had expected it.
She looked at Hale.
“Were you present when the server was seized?”
“No.”
“Were you present when the server was transported?”
“No.”
“Were you present when it was connected to forensic equipment?”
“No.”
“Were you present when the image was created?”
“No.”
“So you cannot personally testify that no one accessed the server during those two days.”
Paul stood again.
“Objection.”
Ivory waited.
Judge Whitmore considered it.
“Overruled. The witness may answer.”
Hale shifted in his chair.
“No. I cannot personally testify to that.”
Ivory looked toward the jury.
Then back at him.
“Thank you.”
She returned to her chair.
Paul's expression had changed.
Only slightly.
But Ivory noticed.
He was no longer smiling.
The judge called for a short recess.
As the jury left, Daniel whispered, “You found something.”
Ivory gathered her papers.
“I found a question.”
“What question?”
She looked at Exhibit 42.
“Who touched the server before Dr. Hale did?”
Across the courtroom, Detective Marcus Vale watched her.
Their eyes met.
For a moment, neither moved.
Then Vale turned away.
Ivory noticed something else.
His right hand was trembling.
Just slightly.
But it was trembling.
And Ivory Bennett had learned a long time ago that people rarely trembled because they were innocent.
The Missing Twelve Minutes
The courthouse hallway was crowded when Ivory stepped outside Courtroom 7B.
Reporters waited near the elevators.
Daniel's case had attracted considerable attention because Northbridge Systems had been contracted by the city to modernize its public transportation network.
The missing $4.8 million had become a political scandal.
Every newspaper wanted a villain.
Daniel Mercer was convenient.
Young entrepreneur.
Expensive house.
Successful company.
Former college athlete.
A photograph of him smiling at a charity event had appeared beside headlines asking whether wealth had made him corrupt.
Ivory hated that kind of journalism.
She hated it because trials were supposed to be about evidence.
Not photographs.
Not headlines.
Not public appetite.
A reporter stepped toward her.
“Ms. Bennett, were you held in contempt today?”
Ivory kept walking.
“Do you believe your client is guilty?”
No answer.
“Are you accusing the district attorney's office of manipulating evidence?”
Ivory stopped.
She turned.
“I am accusing nobody of anything.”
The reporters raised their microphones.
“I am saying that evidence should be examined carefully before anyone is convicted.”
Then she entered the elevator.
The doors closed.
Her associate, Maya Brooks, was waiting downstairs.
Maya was thirty-one and had worked with Ivory for four years.
“You really got yourself held in contempt.”
“Apparently.”
“Five hundred dollars?”
“Apparently.”
Maya handed her a coffee.
“You're enjoying this.”
“I am absolutely not enjoying this.”
“You're smiling.”
Ivory looked at her reflection in the elevator doors.
She was.
Only slightly.
“Because I think we finally have something.”
They returned to their office.
Ivory's firm occupied the fifth floor of an old brick building downtown. It was not glamorous. The furniture was functional, the carpet was worn, and the conference room had a stubborn leak whenever it rained.
Ivory preferred it that way.
She placed Exhibit 42 on the table.
Maya studied it.
“What am I looking for?”
“Timestamp.”
Maya leaned closer.
“11:43:17.”
“Look at the sequence.”
Maya scanned the entries.
11:43:17.
11:43:18.
11:43:19.
Then—
11:43:32.
Maya looked up.
“Twelve seconds.”
“Twelve seconds missing.”
“I thought you said twelve minutes.”
“I did.”
Ivory opened another file.
“Look at the transaction database.”
Maya read.
Her eyes widened.
“11:43 to 11:55.”
“Twelve minutes.”
“Why is the server log only missing twelve seconds?”
“Because somebody cleaned up the wrong file.”
Maya sat down.
“Explain.”
Ivory opened a forensic report.
“The server generated three separate records. Authentication, transaction, and system activity.”
She pointed.
“The prosecution gave us the authentication record and the transaction record. But the system activity record was supposedly unavailable because it was corrupted.”
“Convenient.”
“Very.”
Ivory enlarged the metadata.
“Except metadata doesn't lie easily.”
Maya stared.
“What does that say?”
“Creation date.”
Maya leaned closer.
“March 18.”
Ivory nodded.
“Two days after the server was seized.”
Maya went quiet.
“So somebody created this file after the seizure.”
“Or reconstructed it.”
“That's worse.”
“Yes.”
Maya looked toward Ivory.
“Why didn't Hale catch it?”
“Maybe he did.”
“Then why testify the way he did?”
Ivory didn't answer.
Her phone rang.
Unknown number.
She almost ignored it.
Then she answered.
“Bennett.”
A man's voice spoke softly.
“You're looking in the wrong place.”
Ivory straightened.
“Who is this?”
“You should stop asking about the server.”
“Why?”
“Because the server isn't where they changed the evidence.”
The line went dead.
Maya stared at her.
“What happened?”
Ivory didn't answer immediately.
She wrote the number down.
Then she called her investigator.
“Jonah?”
“Yeah?”
“I need you to look into every piece of evidence connected to Exhibit 42.”
“Already doing that.”
“No. I mean chain of custody.”
A pause.
“All of it?”
“All of it.”
Jonah Mercer had been a police detective for twenty-two years before becoming a private investigator. He was sixty, broad-shouldered, and suspicious by profession and temperament.
“Something happened?”
“Someone called me.”
“Threat?”
“Warning.”
“What did they say?”
“They said the server isn't where the evidence was changed.”
Jonah was silent.
Then he said, “I'll call you back.”
Three hours later, he did.
“I found something.”
Ivory sat up.
“What?”
“Transport log.”
“From the server?”
“Yes.”
“What's wrong?”
“There's a gap.”
“How big?”
“Twelve minutes.”
Ivory closed her eyes.
“Where?”
“Between the department evidence room and the forensic lab.”
“When?”
“The day after the seizure.”
Maya looked at Ivory.
“What happened?”