How online investigators pieced together the events of the B