Replies

If these missing texts were deleted, is it possible to tell when they were deleted, from where they were deleted, and who actually deleted them?

Yes - to varying degrees, depending on where they're recovered from.

Start at the phone itself. Remember how HRC destroyed hers with a hammer? Well, unless the perps did that too, then that's a great starting place. If they did attempt destruction of evidence, that's another charge, too. In any event, depending on what's there, there is free space on the device that will contain all of the messages - when the texts are deleted, they're really just delinking them. Think of the list of text messages you see on your phone; it corresponds to a list of data. When you delete the text, the links in the list are removed but the item remains. Depending on how much the phone is then used or wiped, some or more may be lost, but much will (inevitably + always) remain.

Next, the transmission of the data through the communications network. There will be audit logs throughout. Removing the data would require administrator level authorization whether from some program / user interface or the underlying raw data. Coordinating an "alibi" such as the backup link software didn't work ... well that's got fingerprints all over it, too. People have to login to these systems. Even if they tried to cover themselves, these things can be tracked.

This is why this could be the greatest sting in the history of the earth! Rosenstein is wild card ... whether the Mule is leading the sting or its first target, TBD ;)