He believes investigators will be reviewing purchases, collecting forensic evidence and putting together a timeline.