Chapter 13 - THE DRIVE RACHEL WASN’T SUPPOSED TO OPEN
Emma had one more drive.
Not East Service.
Home.
A black external SSD hidden inside an old camera case.
Rachel had seen it on the day Emma disappeared.
Emma had told her:
“Do not touch this.”
Rachel hadn’t.
For eighteen days.
Now Emma’s attorney asked whether Rachel knew where it was.
Rachel said yes.
“What’s on it?”
“I don’t know.”
The lawyer paused.
Then:
“Emma wants police to have it.”
Rachel stared.
“Why didn’t she take it?”
“She left quickly.”
“Does she know what’s on it?”
“Yes.”
“What?”
“Material that may hurt her own university case.”
Rachel looked at the camera case.
There was the costly part.
Emma could continue presenting herself as investigator.
Or give investigators the drive and expose her own role fully.
Emma chose the drive.
Rachel carried it to campus police unopened.
Lieutenant Brooks made a forensic image.
The contents included all of Emma’s private working notes.
And the email that changed her from observer to participant.
Eight months before Leah’s fall.
Emma to Vanessa:
If Lang kills the official tunnel route, do the old Founders version yourselves. Just don’t tell me.
Vanessa:
Permission granted by the historian.
Emma:
That is absolutely not permission.
Vanessa:
Too late.
Joke.
Bad joke.
Then another month later.
Vanessa:
Mick says west key still works.
Emma:
You people are idiots.
Vanessa:
Coming?
Emma:
Maybe.
She did.
Photographs proved it.
Emma had helped keep the unauthorized tradition alive socially even after the official route was rejected.
She had not organized Leah’s run.
She had normalized it.
Her lawyer knew the drive could affect her graduate standing.
Emma surrendered it anyway.
Then investigators found the 11:58 clue.
Emma had installed a browser extension that stored local session hashes.
The Event Operations login used a session token created six months earlier.
Token owner:
Brooke Miller.
Everyone stopped.
Brooke’s attorney asked for the technical report.
Brooke had logged into Emma’s account six months earlier?
She admitted using Emma’s laptop during a Founders Committee meeting.
Emma let her.
Browser saved session.
Later Brooke used Event Operations terminal and accidentally restored the old browser profile during a committee file sync.
Could that token still access Emma’s account?
Apparently.
Did Brooke use it at 11:58?
Brooke said no.
Where was she?
Dorm room.
No reliable camera.
Vanessa said Brooke was with her until 11:20.
After that, unknown.
Brooke’s phone connected to dorm Wi-Fi at 11:47.
Could remain while Brooke left.
No clean answer.
Then Rachel did something she had wanted everyone else to do from the beginning.
She stopped accusing.
Waited.
Forensics examined the email.
YOU LEFT ONE THING BELOW. COME BACK ALONE.
The message had been typed manually.
No identifiable draft history.
But the terminal keystroke logs survived in an accessibility cache.
Before the email, the user searched:
Emma Carter paper log
west grate
Michael Avery
Someone at Event Operations knew exactly what Emma had been trying to retrieve.
Brooke denied knowing about the paper log until Vanessa told her inside the tunnel.
The video proved she heard it at 9:34.
So she did know.
Could be her.
Could be someone who watched the video.
But Brooke had not uploaded it anywhere.
Or so they thought.
Then her cloud account showed an automatic backup completed at 10:22.
Shared-family access enabled.
One other person could view it.
Brooke’s older brother.
A Hawthorne employee.
Facilities procurement assistant.
Name:
Evan Miller.
He had Event Operations access for Founders Week equipment coordination.
The mystery shifted again.
May you like
Not solved.
But narrower.
