That would be the election machines that had files deleted?
The reason stated for the routers is to see if there was any internet activity.
The previous “audits” were recounts, not forensic audits.
Forensic to me implies a thorough examination of the election machines.
"SLI Compliance is submitting this report as a summary of forensic auditing efforts, solicited by Maricopa County Elections Department. The forensic audit conducted consisted of an analysis and review of the voting system equipment used in the November 3rd, 2020 presidential election and records from that election, to extract facts about the use of the Dominion Voting Systems Democracy Suite 5.5B voting system. "And PRO V&V..
The Post-Election Field Audit evaluated the EMS and ICC workstations and servers by comparing the SHA-256 hash value to the known SHA-256 hash values. In addition, a malware detection tool was run on each workstation/server to establish whether any malware/virus or malicious software was running on the workstations/servers. Pro V&V utilized the tool to extract the firmware from a sample of thirty-five ICP2 units. These extractions were then placed on the Pro V&V laptop to generate the SHA-256 hash value for the firmware. These hash values were compared to known hash values for the Election Assistance Commission Federal Test Campaign. In addition to these evaluations, Pro V&V conducted a network analysis to ensure the network is a “Closed Network” incapable of reaching the internet