David, a contracted network security consultant, walked into the room. He pulled a worn USB drive from his pocket. "Sounds like we need to stop guessing and start looking," he said. "Do you mind if I run my toolkit?"