re: #121 Fozzie Bear

One would think 200k+ documents being downloaded by a single PFC would throw up some flags. One would think.

Is there any evidence he downloaded them all at once? Another option would be if he had access to any backup devices. A backup of a server is made. The backup could be copied separate from the network and restored to another platform disconnected from the network entirely. That will probably be determined in the investigations.