But there are Intelligence teams that can and are tracking what happened that have access, know where the tracks have been attempted to cover...etc. They know certain areas have to be seen in real time...on that as well.
The presentation mentioned the tracks are easy to cover in syslogs but you can catch them in real time traffic captures. Hopefully dhs did. You can also determine by hand counting to see if the tabulation matches the real vote.