1
00:00:06,810 --> 00:00:07,986
Look, I'm telling you guys,

2
00:00:08,010 --> 00:00:09,456
deputy director laroche is dirty.

3
00:00:09,480 --> 00:00:11,186
It's time you know the truth.

4
00:00:11,210 --> 00:00:14,010
He was a double agent
working for secdef this entire time.

5
00:00:14,120 --> 00:00:17,996
Olivia Garcia... she's
an old girlfriend of mine.

6
00:00:18,020 --> 00:00:20,966
My name is Mateo. I'm 18 years old.

7
00:00:20,990 --> 00:00:22,266
Why didn't you tell me I had a son?

8
00:00:22,290 --> 00:00:24,966
I know. And I'm sorry.

9
00:00:24,990 --> 00:00:28,006
I would like to be a part of Mateo's life.

10
00:00:30,000 --> 00:00:32,076
You didn't give up your life for nothing,

11
00:00:32,100 --> 00:00:35,370
dear boy, you saved your agency.

12
00:00:35,500 --> 00:00:36,770
To Leon.

13
00:00:42,140 --> 00:00:45,540
All right, order for Stephen with a p-h,

14
00:00:45,650 --> 00:00:50,456
jenn with two ns, and sadly, just Mike.

15
00:00:50,480 --> 00:00:51,896
Here you go.

16
00:00:51,920 --> 00:00:53,326
It's a capital morning

17
00:00:53,350 --> 00:00:55,036
at capitol oaks coffee.
How may I help you?

18
00:00:55,060 --> 00:00:56,530
Mobile order for Kayla.

19
00:00:57,390 --> 00:00:59,930
- With a "k."
- Coming right up.

20
00:01:02,630 --> 00:01:04,606
Sorry. He's got a strong arm.

21
00:01:07,740 --> 00:01:09,070
Here you go, cutie.

22
00:01:09,870 --> 00:01:12,716
Aw, it's... He sees your badge.

23
00:01:12,740 --> 00:01:13,916
Thinks you're a superhero.

24
00:01:13,940 --> 00:01:17,240
Smart kid. What's his name?

25
00:01:17,380 --> 00:01:19,980
- Evan.
- Well, Evan.

26
00:01:21,550 --> 00:01:24,166
You can be a superhero, too.

27
00:01:24,190 --> 00:01:26,466
- Sound good?
- Thanks.

28
00:01:26,490 --> 00:01:29,966
- You're welcome.
- Order for Kayla with a "k."

29
00:01:31,730 --> 00:01:33,436
Have a capital day.

30
00:01:37,530 --> 00:01:39,070
Duty calls.

31
00:01:39,870 --> 00:01:41,106
See you around, Evan.

32
00:01:41,130 --> 00:01:42,970
Bye.

33
00:01:47,610 --> 00:01:48,656
You couldn't text, director?

34
00:01:48,680 --> 00:01:51,126
I'm calling as dad.

35
00:01:51,150 --> 00:01:52,686
We still on for dinner?

36
00:01:52,710 --> 00:01:56,026
Well... It depends. Who's picking?

37
00:01:56,050 --> 00:01:57,526
I am.

38
00:01:57,550 --> 00:02:00,290
In that case, I'm busy.

39
00:02:04,960 --> 00:02:06,860
Kayla.

40
00:02:08,600 --> 00:02:10,376
Kayla!

41
00:03:02,180 --> 00:03:04,020
Started without me.

42
00:03:05,290 --> 00:03:07,066
You're still having trouble sleeping?

43
00:03:07,090 --> 00:03:09,796
- I'm fine.
- It's been a month.

44
00:03:09,820 --> 00:03:13,190
You barely walked away
from a suicide bombing.

45
00:03:15,700 --> 00:03:18,570
Other people didn't.

46
00:03:21,970 --> 00:03:23,870
Well, maybe this will help.

47
00:03:24,610 --> 00:03:27,780
The FBI and atf just closed the case.

48
00:03:29,040 --> 00:03:30,356
And their conclusion?

49
00:03:30,380 --> 00:03:33,626
A disturbed kid with a
bomb in his backpack.

50
00:03:33,650 --> 00:03:34,720
A lone wolf.

51
00:03:34,850 --> 00:03:37,590
- Lone?
- Yes.

52
00:03:37,720 --> 00:03:39,526
I read the atf report.

53
00:03:39,550 --> 00:03:42,866
That bomb was
sophisticated. Professional.

54
00:03:42,890 --> 00:03:45,806
It had parts you can't
just buy at home depot.

55
00:03:45,830 --> 00:03:48,736
This wasn't just some
kid googling at 3:00 A.M.

56
00:03:48,760 --> 00:03:51,260
This was training. Or guidance.

57
00:03:51,400 --> 00:03:54,546
- Or both.
- Now...

58
00:03:54,570 --> 00:03:56,940
- You're making assumptions.
- No. They are.

59
00:03:57,070 --> 00:03:59,110
They missed something.

60
00:04:00,110 --> 00:04:02,056
Just like I did.

61
00:04:02,080 --> 00:04:04,356
Kayla.

62
00:04:04,380 --> 00:04:06,886
It's not your fault.

63
00:04:06,910 --> 00:04:09,950
Sometimes agents don't see everything.

64
00:04:11,250 --> 00:04:13,290
If the FBI misreads this bombing,

65
00:04:13,420 --> 00:04:15,360
they'll misread the next one.

66
00:04:16,720 --> 00:04:18,820
What if this wasn't a one-off?

67
00:04:21,260 --> 00:04:22,760
Kayla.

68
00:04:24,100 --> 00:04:25,970
What do you want?

69
00:04:27,270 --> 00:04:28,576
I want to do everything I can

70
00:04:28,600 --> 00:04:31,600
to make sure it never happens again.

71
00:04:35,910 --> 00:04:40,526
Mpd says the vehicle belongs
to Navy petty officer Victor Lee.

72
00:04:40,550 --> 00:04:42,956
Worked at the naval research lab.

73
00:04:42,980 --> 00:04:45,826
Pretty sure this man was
carrying the explosive.

74
00:04:45,850 --> 00:04:47,990
Extensive damage to the torso.

75
00:04:48,120 --> 00:04:50,660
A piece of fabric fused to his shoulder.

76
00:04:50,790 --> 00:04:54,830
Looks like it could be
remnants of a bag or a backpack.

77
00:04:55,800 --> 00:04:58,946
Young man. Backpack
bomb. Sounds familiar.

78
00:04:58,970 --> 00:05:00,946
Coffee shop bombing from last year.

79
00:05:00,970 --> 00:05:02,840
Yeah, and FBI thought
that was a lone wolf.

80
00:05:02,970 --> 00:05:04,840
Well, maybe the lone
wolf had some friends.

81
00:05:04,970 --> 00:05:07,616
Careless ones 'cause unless
their target was an empty alley,

82
00:05:07,640 --> 00:05:09,410
I'd say the device went off early.

83
00:05:09,980 --> 00:05:11,720
Then what was the real target?

84
00:05:12,750 --> 00:05:14,696
Phone and laptop aren't gonna help.

85
00:05:17,250 --> 00:05:19,590
Is that Mateo?

86
00:05:20,350 --> 00:05:22,266
You guys are getting thick as thieves.

87
00:05:22,290 --> 00:05:24,330
Yeah, we've been bonding lately.

88
00:05:24,460 --> 00:05:27,000
So what is it? Baseball? Laser tag?

89
00:05:27,130 --> 00:05:29,106
Geohash.

90
00:05:29,130 --> 00:05:30,670
I am so afraid to ask.

91
00:05:30,800 --> 00:05:32,476
Geohash is a form of coding. Latitude

92
00:05:32,500 --> 00:05:34,616
and longitude compressed.
I'll tell you what, this kid

93
00:05:34,640 --> 00:05:36,676
got some pretty amazing computer skills.

94
00:05:36,700 --> 00:05:38,840
Who could've guessed that?

95
00:05:38,970 --> 00:05:40,986
Even told him about the
internship program, you know,

96
00:05:41,010 --> 00:05:44,150
in NCIS cyber, so Mateo's gonna
come by tomorrow, take a tour.

97
00:05:45,110 --> 00:05:46,110
That's a big step.

98
00:05:46,180 --> 00:05:47,956
But it's just a tour. You know?

99
00:05:47,980 --> 00:05:49,880
Don't know for sure
that it's gonna happen.

100
00:05:50,020 --> 00:05:52,666
We got a Navy bomber to deal with here.

101
00:05:52,690 --> 00:05:54,190
Negative on the Navy part.

102
00:05:54,320 --> 00:05:55,996
Petty officer Lee is alive and well.

103
00:05:56,020 --> 00:05:57,520
Currently holding warrior two

104
00:05:57,630 --> 00:05:59,966
in a hot yoga class two blocks over.

105
00:05:59,990 --> 00:06:02,360
If our bomber isn't Navy, who is he?

106
00:06:03,130 --> 00:06:06,070
Got one wallet here. Extra crispy.

107
00:06:08,140 --> 00:06:11,276
Ryan or Bryan Wallace. 19.

108
00:06:11,300 --> 00:06:12,500
Organ donor.

109
00:06:12,610 --> 00:06:14,616
I'd say the ship has sailed on that one.

110
00:06:14,640 --> 00:06:15,916
Ryan Wallace.

111
00:06:15,940 --> 00:06:17,440
Lives in Reston.

112
00:06:17,550 --> 00:06:19,950
Registered vehicle's a blue Honda.

113
00:06:20,750 --> 00:06:22,456
You mean like that one?

114
00:06:22,480 --> 00:06:25,380
Yeah, could be.

115
00:06:26,250 --> 00:06:27,620
Be careful.

116
00:06:29,690 --> 00:06:32,406
Maybe our bomber left
behind something useful,

117
00:06:32,430 --> 00:06:34,436
like info on his actual target.

118
00:06:34,460 --> 00:06:35,876
Targets. Plural.

119
00:06:35,900 --> 00:06:39,370
Better clear the area. Get
the bomb squad back in here.

120
00:06:40,430 --> 00:06:44,170
I don't think those backpacks
are filled with school supplies.

121
00:06:50,340 --> 00:06:52,486
I found a manufacturing defect.

122
00:06:52,510 --> 00:06:55,226
This capacitor was
cracked before the explosion,

123
00:06:55,250 --> 00:06:57,596
causing the premature
detonation in the alley.

124
00:06:57,620 --> 00:06:59,150
Bad luck for the bomber.

125
00:06:59,290 --> 00:07:02,096
Very good luck for everyone else.

126
00:07:02,120 --> 00:07:05,920
Because the other six
devices... all fully functional.

127
00:07:06,030 --> 00:07:07,706
If he had made it to his targets...

128
00:07:07,730 --> 00:07:10,976
We would be counting
dozens of bodies, not just his.

129
00:07:11,000 --> 00:07:14,670
I confirmed our bomber's
DNA... Ryan Wallace.

130
00:07:14,800 --> 00:07:17,946
- 19. Single. No next of kin.
- Device data?

131
00:07:17,970 --> 00:07:21,040
Laptop and phone were
completely destroyed in the blast.

132
00:07:21,170 --> 00:07:23,656
Apartment was basically
a mattress and a router.

133
00:07:23,680 --> 00:07:26,986
All we've got are the contents of his car.

134
00:07:27,010 --> 00:07:30,510
Trash, receipts, and this.

135
00:07:30,650 --> 00:07:32,280
Agnors bliss.

136
00:07:32,390 --> 00:07:35,536
It's a Sci-Fi space opera that's
a little too niche, even for me,

137
00:07:35,560 --> 00:07:37,236
and I read the dune glossary.

138
00:07:37,260 --> 00:07:38,360
So we've got nothing?

139
00:07:38,490 --> 00:07:40,206
Not nothing. Keep walking.

140
00:07:40,230 --> 00:07:43,506
I compared all of the alley bombs

141
00:07:43,530 --> 00:07:45,400
to last year's coffee shop device.

142
00:07:45,530 --> 00:07:48,046
Same parts. Same soldering technique.

143
00:07:48,070 --> 00:07:49,416
Same assembly sequence.

144
00:07:49,440 --> 00:07:50,616
That's not a coincidence.

145
00:07:50,640 --> 00:07:52,716
No. That's a signature.

146
00:07:52,740 --> 00:07:54,716
Someone's training people to build these.

147
00:07:54,740 --> 00:07:56,916
So it's not one bomber, it's a network.

148
00:07:56,940 --> 00:07:59,956
Which means we need to
reopen the FBI's coffee shop case.

149
00:07:59,980 --> 00:08:01,756
Figure out what got missed.

150
00:08:01,780 --> 00:08:03,750
I already pulled the original witness list,

151
00:08:03,880 --> 00:08:06,826
and look who's on it.

152
00:08:06,850 --> 00:08:08,866
The director's daughter was there?

153
00:08:08,890 --> 00:08:11,266
According to this, she stepped outside

154
00:08:11,290 --> 00:08:13,060
just before the blast.

155
00:08:13,190 --> 00:08:15,476
- And we never heard about it?
- Vance and Kayla probably wanted

156
00:08:15,500 --> 00:08:18,146
to avoid the media attention.

157
00:08:18,170 --> 00:08:21,106
Haven't seen her since his funeral.

158
00:08:21,130 --> 00:08:22,746
I heard she took personal leave.

159
00:08:22,770 --> 00:08:25,146
Okay, so maybe we
don't make Kayla relive

160
00:08:25,170 --> 00:08:26,500
the day that almost killed her.

161
00:08:26,610 --> 00:08:29,116
There are plenty of others to start with.

162
00:08:29,140 --> 00:08:30,580
Maybe they can help.

163
00:08:30,710 --> 00:08:33,086
The FBI was wrong
about that coffee shop.

164
00:08:33,110 --> 00:08:35,826
They called my son
a lone wolf. My Danny

165
00:08:35,850 --> 00:08:38,296
detonated that bomb...
I'm not denying that...

166
00:08:38,320 --> 00:08:40,026
but he didn't do it on his own.

167
00:08:40,050 --> 00:08:43,520
NCIS agrees, Mr. Hammersmith.

168
00:08:45,530 --> 00:08:47,930
Call me Hank.

169
00:08:48,060 --> 00:08:49,630
Listen, Hank, we are investigating

170
00:08:49,760 --> 00:08:52,800
a second backpack bombing. We believe

171
00:08:52,930 --> 00:08:55,830
that it may be connected
to the one from last year.

172
00:08:55,940 --> 00:08:58,416
I knew it wasn't just Danny.

173
00:08:58,440 --> 00:09:02,456
Well, these are the
items that we recovered...

174
00:09:02,480 --> 00:09:04,120
From the latest bomber.

175
00:09:05,380 --> 00:09:06,726
Does anything look familiar?

176
00:09:06,750 --> 00:09:08,990
Anything connect to your son?

177
00:09:09,780 --> 00:09:12,196
None of this rings a bell.

178
00:09:12,220 --> 00:09:17,266
Danny... Kept things to himself.

179
00:09:17,290 --> 00:09:18,990
His whole life was online.

180
00:09:19,130 --> 00:09:22,706
He talked about chatting with friends,

181
00:09:22,730 --> 00:09:27,200
but I never bothered to check in.

182
00:09:29,200 --> 00:09:31,840
Told myself it was just a phase.

183
00:09:31,970 --> 00:09:35,156
The mood swings, the anger, him

184
00:09:35,180 --> 00:09:39,186
pulling away from family.

185
00:09:39,210 --> 00:09:42,926
Whatever was going on
with my son, I missed it.

186
00:09:42,950 --> 00:09:48,390
It's hard to know what's going
on in any teenager's head.

187
00:09:50,120 --> 00:09:51,820
But I could have asked.

188
00:09:53,190 --> 00:09:55,190
Don't let me keep you.

189
00:09:56,500 --> 00:09:59,546
It's, it's actually my son.

190
00:09:59,570 --> 00:10:01,246
Just checked in for an internship tour.

191
00:10:01,270 --> 00:10:03,916
That's good.

192
00:10:03,940 --> 00:10:05,986
Stay close.

193
00:10:06,010 --> 00:10:08,750
If family doesn't fill the space...

194
00:10:09,880 --> 00:10:11,680
someone else will.

195
00:10:11,810 --> 00:10:15,910
Like these, "friends"
your son met online?

196
00:10:16,020 --> 00:10:19,690
Yeah. On that website archive.

197
00:10:19,820 --> 00:10:22,390
That's where he said they talked.

198
00:10:23,520 --> 00:10:26,736
Archive is a private online
community. Invitation-only.

199
00:10:26,760 --> 00:10:28,936
FBI looked at this last year.

200
00:10:28,960 --> 00:10:30,476
They only checked the lobby.

201
00:10:30,500 --> 00:10:32,846
I found an encrypted back room

202
00:10:32,870 --> 00:10:35,046
where the real conversations happen.

203
00:10:35,070 --> 00:10:36,646
Isolated, angry young men

204
00:10:36,670 --> 00:10:39,070
find each other, validate
each other, and spiral.

205
00:10:39,210 --> 00:10:41,046
Only managed a glimpse so far,

206
00:10:41,070 --> 00:10:42,570
but I'm tracing traffic spikes.

207
00:10:42,710 --> 00:10:45,986
Sorry to interrupt. You
guys remember Mateo.

208
00:10:46,010 --> 00:10:47,410
How could we forget?

209
00:10:47,550 --> 00:10:50,420
Last time you were here was eventful.

210
00:10:50,550 --> 00:10:53,196
Yeah, well, you guys
saved my mom's life.

211
00:10:53,220 --> 00:10:56,536
She says that I should thank
you every chance that I get.

212
00:10:56,560 --> 00:10:57,866
Well, then she's raising you right.

213
00:10:57,890 --> 00:10:59,166
Though I'm guessing she's not the one

214
00:10:59,190 --> 00:11:00,406
who taught you geohashing.

215
00:11:00,430 --> 00:11:02,230
Actually, Mateo taught himself.

216
00:11:02,360 --> 00:11:04,976
He, also taught himself python,

217
00:11:05,000 --> 00:11:08,400
right. Dad, you're doing the thing again.

218
00:11:08,540 --> 00:11:09,737
What, bragging?

219
00:11:09,761 --> 00:11:13,280
Saying tech stuff that
nobody else understands.

220
00:11:14,410 --> 00:11:16,716
Ooh, hold my beer.

221
00:11:16,740 --> 00:11:18,740
I am about to go full technobabble.

222
00:11:18,850 --> 00:11:20,226
My server trace just came back.

223
00:11:20,250 --> 00:11:23,026
Archive's traffic is bouncing through

224
00:11:23,050 --> 00:11:25,096
a physical relay node in Bethesda.

225
00:11:25,120 --> 00:11:27,496
- It's a server farm.
- I know that corner.

226
00:11:27,520 --> 00:11:31,496
Used to be a flower shop.
Best peonies in the tristate.

227
00:11:31,520 --> 00:11:34,836
Point being it closed last
year. Been vacant ever since.

228
00:11:34,860 --> 00:11:36,290
Apparently not.

229
00:11:36,400 --> 00:11:40,006
According to GPS, our
alley bomber's Honda was

230
00:11:40,030 --> 00:11:42,876
parked at that address the
day before the explosion.

231
00:11:42,900 --> 00:11:44,846
Okay, so it's not a flower shop.

232
00:11:44,870 --> 00:11:46,770
More like backpack bomber hq.

233
00:11:46,910 --> 00:11:48,756
All right, let's find out. Grab your gear.

234
00:11:48,780 --> 00:11:50,416
All right, well...

235
00:11:50,440 --> 00:11:52,186
Mateo, sorry, I didn't think
we were gonna jump into this

236
00:11:52,210 --> 00:11:54,356
- so quick.
- No. No. Go.

237
00:11:54,380 --> 00:11:56,756
This totally beats a tour. Go.

238
00:11:56,780 --> 00:11:58,966
I'll get him down to Jimmy. That man

239
00:11:58,990 --> 00:12:02,330
- lives to play a tour guide.
- Nice. Thanks, kase. All right.

240
00:12:09,900 --> 00:12:12,006
- Federal agents. Hands up.
- What?

241
00:12:12,030 --> 00:12:14,046
Hands now!

242
00:12:15,540 --> 00:12:19,410
O-Okay. We're cooperating.
This has to be a mistake.

243
00:12:19,970 --> 00:12:21,340
Not from where I'm standing.

244
00:12:22,180 --> 00:12:24,180
- You need to talk to the boss.
- The boss?

245
00:12:24,310 --> 00:12:27,656
Easy. Let me see your hands.

246
00:12:27,680 --> 00:12:30,050
Whatever you say, agent knight.

247
00:12:32,750 --> 00:12:34,850
Kayla?

248
00:12:42,700 --> 00:12:44,636
One.

249
00:12:44,660 --> 00:12:45,906
One, two.

250
00:12:45,930 --> 00:12:47,576
One, two, three.

251
00:12:47,600 --> 00:12:50,140
You've been late for two force
protection briefings this week.

252
00:12:50,870 --> 00:12:53,010
You left early yesterday.

253
00:12:53,140 --> 00:12:55,220
Took three calls in the
middle of a security update.

254
00:12:55,340 --> 00:12:56,986
Is this mitt work or a
performance review?

255
00:12:57,010 --> 00:12:58,826
Keep your guard up.

256
00:12:58,850 --> 00:13:00,986
Distraction makes you
vulnerable. Let's go.

257
00:13:03,080 --> 00:13:04,526
You've been moonlighting.

258
00:13:05,690 --> 00:13:07,660
Are you having me followed?

259
00:13:09,120 --> 00:13:10,396
I'm the director of a federal agency

260
00:13:10,420 --> 00:13:11,436
and I'm also your father.

261
00:13:11,460 --> 00:13:13,836
It's my job to know things.

262
00:13:13,860 --> 00:13:18,360
You've been building a
private operation outside NCIS.

263
00:13:24,500 --> 00:13:27,516
Moonlighting is against
agency policy, Kayla.

264
00:13:27,540 --> 00:13:30,356
And doing it as the director's
daughter, that's worse.

265
00:13:30,380 --> 00:13:33,420
We're not hacking banks
or wiretapping phones.

266
00:13:33,550 --> 00:13:36,226
My group monitors online activity.

267
00:13:36,250 --> 00:13:38,526
Creating accounts and using aliases

268
00:13:38,550 --> 00:13:40,396
to infiltrate extremist chat rooms.

269
00:13:40,420 --> 00:13:42,760
Something that most
agencies already do.

270
00:13:42,890 --> 00:13:44,766
Not like this. I checked.

271
00:13:44,790 --> 00:13:48,406
They only look for threats.
We look for patterns,

272
00:13:48,430 --> 00:13:50,136
people on the path to violence,

273
00:13:50,160 --> 00:13:52,106
so we can stop them
before they get there.

274
00:13:52,130 --> 00:13:55,076
It's not easy. Or cheap.

275
00:13:55,100 --> 00:13:57,076
I applied for private Grant money.

276
00:13:57,100 --> 00:13:59,770
Totally legal. Fully independent.

277
00:13:59,910 --> 00:14:02,050
Very smart.

278
00:14:02,840 --> 00:14:05,486
So you're not gonna
tell me to shut it down?

279
00:14:05,510 --> 00:14:06,810
No.

280
00:14:08,020 --> 00:14:10,196
But you can't live in two worlds.

281
00:14:10,220 --> 00:14:13,066
There's a reason it's against policy.

282
00:14:13,090 --> 00:14:14,696
Things get missed.

283
00:14:14,720 --> 00:14:17,696
First you didn't want
me working at NCIS at all.

284
00:14:17,720 --> 00:14:19,966
Now you only want me working at NCIS?

285
00:14:19,990 --> 00:14:21,836
You've earned your place.

286
00:14:21,860 --> 00:14:23,506
You have a future.

287
00:14:23,530 --> 00:14:26,346
Maybe even in the
director's chair one day.

288
00:14:26,370 --> 00:14:29,810
Wow. Seems like my
future's already been decided.

289
00:14:29,940 --> 00:14:32,810
- Kayla.
- What about what I want?

290
00:14:35,480 --> 00:14:37,980
What do you want?

291
00:14:42,780 --> 00:14:43,950
We're not building bombs.

292
00:14:44,080 --> 00:14:45,610
We're trying to stop them.

293
00:14:45,720 --> 00:14:47,936
We monitor extremist rhetoric online.

294
00:14:47,960 --> 00:14:49,766
Separate noise from credible threat.

295
00:14:49,790 --> 00:14:52,160
Then pass leads to the
appropriate agencies.

296
00:14:52,290 --> 00:14:53,620
How come we haven't heard of you?

297
00:14:53,760 --> 00:14:55,306
We're privately funded,

298
00:14:55,330 --> 00:14:57,236
and not hearing about
us is the whole point.

299
00:14:57,260 --> 00:15:00,576
When do you have time for
all this? You're still an agent.

300
00:15:00,600 --> 00:15:03,316
I can do both. I'm good at it.

301
00:15:03,340 --> 00:15:04,986
Maybe too good.

302
00:15:05,010 --> 00:15:08,680
Our latest alley bomber was
parked outside this storefront.

303
00:15:08,810 --> 00:15:12,126
We thought he was using
this place as a staging ground.

304
00:15:12,150 --> 00:15:14,156
Now it looks like he was casing it.

305
00:15:14,180 --> 00:15:17,550
One of these bombs was likely
meant for you and your team.

306
00:15:18,450 --> 00:15:21,226
That's not entirely bad news.

307
00:15:21,250 --> 00:15:22,566
It's not?

308
00:15:22,590 --> 00:15:25,636
If someone's targeting us,
it means we struck a nerve.

309
00:15:25,660 --> 00:15:28,436
Which proves I was right
to build this operation.

310
00:15:28,460 --> 00:15:30,076
These attacks aren't isolated.

311
00:15:30,100 --> 00:15:31,806
Your people are still in danger.

312
00:15:31,830 --> 00:15:35,170
You need to consider their safety.

313
00:15:37,000 --> 00:15:38,346
Emergency shutdown.

314
00:15:38,370 --> 00:15:41,516
Go home and wait
for further instructions.

315
00:15:41,540 --> 00:15:43,056
What about you?

316
00:15:43,080 --> 00:15:44,550
I'm not going home.

317
00:15:44,680 --> 00:15:48,080
I'm going back to NCIS.
We've got work to do.

318
00:15:49,650 --> 00:15:51,426
"Okay, we are now entering

319
00:15:51,450 --> 00:15:53,696
the main cyber operations bullpen."

320
00:15:53,720 --> 00:15:56,866
Dr. Palmer, you really don't
have to read from the cards.

321
00:15:56,890 --> 00:16:00,866
Well, kasie insisted
that I stay on script, so...

322
00:16:00,890 --> 00:16:03,936
"If accepted into our internship program,

323
00:16:03,960 --> 00:16:05,400
you would work here."

324
00:16:05,530 --> 00:16:07,576
That is a lot of screens.

325
00:16:07,600 --> 00:16:09,800
Yeah, yeah. We-we love our screens.

326
00:16:10,570 --> 00:16:13,370
So, are you thinking about,
cybersecurity as a career?

327
00:16:13,510 --> 00:16:21,126
Honestly never thought
about it at all until recently.

328
00:16:22,350 --> 00:16:24,196
I'm sorry. The cards say that Curtis

329
00:16:24,220 --> 00:16:25,796
is supposed to take
over from here, and I don't

330
00:16:25,820 --> 00:16:31,036
see a Curtis, so... Tell
you what, you stay put,

331
00:16:31,060 --> 00:16:32,890
and I will track him down.

332
00:16:37,560 --> 00:16:39,160
You would be great down here.

333
00:16:39,270 --> 00:16:40,646
Agent torres.

334
00:16:40,670 --> 00:16:42,616
You gonna be my next tour guide?

335
00:16:42,640 --> 00:16:44,646
No. No, no, no.

336
00:16:44,670 --> 00:16:47,386
Just came to grab
some reports from cyber.

337
00:16:47,410 --> 00:16:50,150
But if you got that tech
gene from your dad...

338
00:16:51,340 --> 00:16:53,210
we could use someone like you.

339
00:16:54,250 --> 00:16:57,096
I very much doubt that.

340
00:16:57,120 --> 00:16:58,690
Hey.

341
00:16:59,920 --> 00:17:01,126
You good?

342
00:17:01,150 --> 00:17:03,066
Yeah. Yeah.

343
00:17:03,090 --> 00:17:04,936
It's just this place... NCIS.

344
00:17:04,960 --> 00:17:09,676
It... the... the weight of it
can be a little overwhelming.

345
00:17:09,700 --> 00:17:11,370
You know?

346
00:17:12,870 --> 00:17:14,776
Yeah.

347
00:17:14,800 --> 00:17:17,116
When we went back
and analyzed the traffic

348
00:17:17,140 --> 00:17:20,146
after the coffee shop attack,
archive chatter had surged.

349
00:17:20,170 --> 00:17:22,940
Anger. Validation. Escalation.

350
00:17:23,080 --> 00:17:25,686
- What about the alley bombing?
- The opposite.

351
00:17:25,710 --> 00:17:27,980
Traffic fell into what we
call a "coordinated quiet."

352
00:17:28,120 --> 00:17:30,726
- Everybody knows something's up.
- So they stay low.

353
00:17:30,750 --> 00:17:33,166
My group knew a storm was coming.

354
00:17:33,190 --> 00:17:36,466
Just not where. We missed it.

355
00:17:36,490 --> 00:17:38,906
So what's fueling this storm?
Why are these guys so angry?

356
00:17:38,930 --> 00:17:40,166
Anti-corporate rage.

357
00:17:40,190 --> 00:17:42,290
Young men who feel
powerless and invisible.

358
00:17:42,400 --> 00:17:45,646
They think that big companies
are in control of their jobs,

359
00:17:45,670 --> 00:17:48,476
their debt, their future, and
that's why they can't get ahead.

360
00:17:48,500 --> 00:17:51,140
The coffee shop was
a, a corporate chain.

361
00:17:51,270 --> 00:17:52,500
Exactly.

362
00:17:52,610 --> 00:17:54,516
And around the corner
from your alley bombing?

363
00:17:54,540 --> 00:17:56,216
A major corporate headquarters.

364
00:17:56,240 --> 00:17:59,086
Coordinated symbolism.
Identical bomb building.

365
00:17:59,110 --> 00:18:00,980
Someone is leading this group.

366
00:18:01,110 --> 00:18:04,556
More like instructing
them. Grooming them.

367
00:18:04,580 --> 00:18:07,396
- Fueling their anger.
- What, you got a name?

368
00:18:07,420 --> 00:18:08,496
I've got five.

369
00:18:08,520 --> 00:18:10,166
All influential usernames.

370
00:18:10,190 --> 00:18:11,596
No real identities yet,

371
00:18:11,620 --> 00:18:13,166
but that's where I was
hoping NCIS could help.

372
00:18:13,190 --> 00:18:15,020
Kasie and McGee are already digging in.

373
00:18:15,130 --> 00:18:16,476
And we struck gold.

374
00:18:16,500 --> 00:18:19,246
No real names yet, but
all five usernames share

375
00:18:19,270 --> 00:18:21,476
the same encryption fingerprint,
same key and checks um.

376
00:18:21,500 --> 00:18:24,116
He's doing that thing again.

377
00:18:24,140 --> 00:18:26,146
These five users are
all the same person.

378
00:18:26,170 --> 00:18:27,816
Great. How do we find them?

379
00:18:27,840 --> 00:18:30,786
No idea. We've exhausted
every digital lead.

380
00:18:30,810 --> 00:18:33,380
Maybe we stop looking online.

381
00:18:34,280 --> 00:18:35,826
One of those usernames...
they mentioned

382
00:18:35,850 --> 00:18:37,456
a favorite coffee shop in Glen echo.

383
00:18:37,480 --> 00:18:39,280
I thought you said they
hated coffee shops?

384
00:18:39,390 --> 00:18:43,296
Corporate chains, so this one
must be local, mom-and-pop.

385
00:18:43,320 --> 00:18:46,066
Well, if we stake out that
shop, we can monitor their Wi-Fi

386
00:18:46,090 --> 00:18:47,536
for that same encryption fingerprint.

387
00:18:47,560 --> 00:18:50,336
Our puppet master
logs on, and we grab him.

388
00:18:50,360 --> 00:18:52,546
We should loop in
the local chief of police.

389
00:18:52,570 --> 00:18:55,710
Keep media exposure
minimal and avoid a turf war.

390
00:18:56,840 --> 00:18:59,740
What? It's smart.

391
00:18:59,870 --> 00:19:01,070
Your dad would agree.

392
00:19:02,140 --> 00:19:03,610
Let's go fishing.

393
00:19:06,550 --> 00:19:09,296
Moonbeams and coffee beans?

394
00:19:09,320 --> 00:19:11,526
I can smell the patchouli from here.

395
00:19:11,550 --> 00:19:14,526
It's definitely not a franchise.

396
00:19:14,550 --> 00:19:16,250
Anything?

397
00:19:17,360 --> 00:19:19,536
No hits on the Wi-Fi signal.

398
00:19:19,560 --> 00:19:22,030
I still got nothing.

399
00:19:24,230 --> 00:19:29,100
I haven't really, checked
in since your dad's funeral.

400
00:19:29,940 --> 00:19:31,940
How are you?

401
00:19:32,070 --> 00:19:33,640
I miss him.

402
00:19:35,210 --> 00:19:37,756
The small things most of all.

403
00:19:37,780 --> 00:19:41,256
Going to dinner together, movies.

404
00:19:41,280 --> 00:19:45,626
You know, we used to box
once a month, rain or shine.

405
00:19:45,650 --> 00:19:49,750
I haven't been back to that gym since.

406
00:19:50,620 --> 00:19:52,266
Well, for what it's worth,

407
00:19:52,290 --> 00:19:54,960
I think he'd be proud of what you built.

408
00:19:56,230 --> 00:19:58,746
I'm not so sure he was.

409
00:19:58,770 --> 00:20:00,740
So he knew about it?

410
00:20:04,370 --> 00:20:05,470
Yeah.

411
00:20:05,610 --> 00:20:08,986
My dad was NCIS, too. Different office.

412
00:20:09,010 --> 00:20:11,210
Same shadow.

413
00:20:11,980 --> 00:20:15,120
Okay, your dad's shadow's a lot bigger.

414
00:20:16,920 --> 00:20:20,096
There's always the question,

415
00:20:20,120 --> 00:20:22,790
are we honoring the legacy...

416
00:20:24,060 --> 00:20:26,500
or trying to outrun it?

417
00:20:29,000 --> 00:20:32,840
That's him. Our puppet master is inside.

418
00:20:33,500 --> 00:20:34,830
He's logging into archive.

419
00:20:35,600 --> 00:20:38,370
On a laptop. You see anything?

420
00:20:38,970 --> 00:20:40,010
No way.

421
00:20:40,140 --> 00:20:42,680
You got to be kidding me.

422
00:20:44,140 --> 00:20:46,210
Wait, that's...

423
00:20:47,550 --> 00:20:48,796
Gabriel laroche.

424
00:20:48,820 --> 00:20:51,520
The former NCIS deputy director.

425
00:20:52,350 --> 00:20:53,480
What's he doing here?

426
00:20:53,590 --> 00:20:56,330
I think we are about to find out.

427
00:20:58,730 --> 00:21:00,166
Can we help you?

428
00:21:00,190 --> 00:21:02,906
You need to shut down
this operation immediately.

429
00:21:02,930 --> 00:21:06,200
We don't work for you anymore.

430
00:21:07,000 --> 00:21:09,916
Well, agent knight,

431
00:21:09,940 --> 00:21:12,740
apparently you didn't get the memo.

432
00:21:23,720 --> 00:21:25,496
You just burned our best lead.

433
00:21:25,520 --> 00:21:28,396
Because of your stunt, the man
that we were about to identify

434
00:21:28,420 --> 00:21:31,636
walked out of that coffee shop
and we never got eyes on him.

435
00:21:31,660 --> 00:21:33,466
You're welcome.

436
00:21:33,490 --> 00:21:34,820
What gives you that authority?

437
00:21:34,930 --> 00:21:37,030
I'm the new U.S.
associate Attorney General.

438
00:21:37,160 --> 00:21:39,030
I can terminate any investigative line

439
00:21:39,170 --> 00:21:40,676
I believe has been legally compromised.

440
00:21:40,700 --> 00:21:42,076
Compromised how?

441
00:21:42,100 --> 00:21:45,016
Kayla Vance's private operation.

442
00:21:45,040 --> 00:21:48,340
Turns out, it's been
funded with criminal money.

443
00:21:49,180 --> 00:21:50,516
I'm assuming you have proof

444
00:21:50,540 --> 00:21:52,540
because that is a serious accusation.

445
00:21:52,680 --> 00:21:54,086
It's a serious problem.

446
00:21:54,110 --> 00:21:56,256
Dirty money contaminates the work.

447
00:21:56,280 --> 00:21:59,426
Now every case her group
touched is compromised,

448
00:21:59,450 --> 00:22:00,766
including yours.

449
00:22:00,790 --> 00:22:04,066
Any arrest that we
make based on her intel

450
00:22:04,090 --> 00:22:06,136
collapses in court.

451
00:22:06,160 --> 00:22:08,006
I spared you a humiliating defeat.

452
00:22:08,030 --> 00:22:11,806
Financial reviews don't
usually require an associate a.G.

453
00:22:11,830 --> 00:22:15,670
To personally crash a stakeout.

454
00:22:17,300 --> 00:22:19,316
Unless there's something bigger.

455
00:22:19,340 --> 00:22:20,740
The money trail is real.

456
00:22:20,870 --> 00:22:22,670
I intend to follow it wherever it leads.-

457
00:22:22,780 --> 00:22:26,086
and meanwhile, we let a network
of domestic terrorists walk?

458
00:22:26,110 --> 00:22:28,910
NCIS is free to continue
the bombing case

459
00:22:29,020 --> 00:22:31,726
without Kayla Vance.

460
00:22:31,750 --> 00:22:33,666
She and I need to talk.

461
00:22:33,690 --> 00:22:37,230
There are plenty of places
in this building to do that.

462
00:22:37,360 --> 00:22:38,706
You chose here?

463
00:22:38,730 --> 00:22:41,636
I'm sure you heard.
Latest interim director

464
00:22:41,660 --> 00:22:43,976
just accepted an
ambassador post overseas.

465
00:22:44,000 --> 00:22:46,940
This office just became vacant.

466
00:22:49,400 --> 00:22:50,716
You got to be kidding me.

467
00:22:50,740 --> 00:22:52,046
I thought we were done with laroche.

468
00:22:52,070 --> 00:22:54,116
Associate Attorney General laroche.

469
00:22:54,140 --> 00:22:56,716
I don't get it. I vetted every Grant,

470
00:22:56,740 --> 00:22:58,886
every donor, every transfer.

471
00:22:58,910 --> 00:23:00,726
I built that operation carefully.

472
00:23:00,750 --> 00:23:02,086
We believe you.

473
00:23:02,110 --> 00:23:04,010
So where did dirty money
suddenly come from?

474
00:23:04,120 --> 00:23:05,966
We need to rebuild any of the evidence

475
00:23:05,990 --> 00:23:07,666
provided to us by Kayla's group.

476
00:23:07,690 --> 00:23:09,166
Yeah, before whoever's
behind these bombings

477
00:23:09,190 --> 00:23:10,860
strikes again.

478
00:23:11,920 --> 00:23:13,520
We might be too late.

479
00:23:13,630 --> 00:23:16,100
Archive's been quiet since we
got back from the coffee shop.

480
00:23:16,230 --> 00:23:18,906
Quiet? Like before the alley bomb?

481
00:23:18,930 --> 00:23:20,646
Something's coming.

482
00:23:20,670 --> 00:23:22,470
And you've been sidelined.

483
00:23:24,070 --> 00:23:27,470
More like summoned.
Laroche wants me upstairs.

484
00:23:28,310 --> 00:23:30,486
You go deal with that.
We'll handle the rest.

485
00:23:33,780 --> 00:23:36,556
- Damn it.
- What?

486
00:23:36,580 --> 00:23:40,780
Mateo. I missed his entire
tour. He's on his way out.

487
00:23:42,990 --> 00:23:46,166
I'm-I'm so sorry about this, okay?

488
00:23:46,190 --> 00:23:48,236
This is not exactly the day I had in mind.

489
00:23:48,260 --> 00:23:50,500
Yeah, me neither, but, hey,

490
00:23:50,630 --> 00:23:52,206
I got to see a real investigation,

491
00:23:52,230 --> 00:23:54,746
I got to, go to the cyber basement,

492
00:23:54,770 --> 00:23:57,846
and I saw two fights outside of hr, so...

493
00:23:57,870 --> 00:24:02,386
Well, I was hoping for
something more convincing.

494
00:24:02,410 --> 00:24:06,720
Right. About that...

495
00:24:08,050 --> 00:24:12,420
I think there's something
that I got to tell you.

496
00:24:16,890 --> 00:24:18,466
Hey.

497
00:24:18,490 --> 00:24:19,866
You don't got to say anything.

498
00:24:19,890 --> 00:24:22,736
- I... I don't?
- No.

499
00:24:22,760 --> 00:24:26,006
Look, I, I know that I've
been excited about you

500
00:24:26,030 --> 00:24:27,776
applying for this
internship and everything,

501
00:24:27,800 --> 00:24:30,176
but I, you know, I don't
want you doing something

502
00:24:30,200 --> 00:24:31,976
just because you think
it's gonna make me happy.

503
00:24:32,000 --> 00:24:35,700
You got to figure out
what works best for you.

504
00:24:36,980 --> 00:24:39,086
Right.

505
00:24:39,110 --> 00:24:42,450
I-I don't think NCIS is for me.

506
00:24:43,650 --> 00:24:44,796
Well, that's okay.

507
00:24:44,820 --> 00:24:46,120
You know?

508
00:24:47,890 --> 00:24:49,236
Nick, hey, you need me, or...?

509
00:24:49,260 --> 00:24:50,866
Just that kasie found something

510
00:24:50,890 --> 00:24:54,760
on the bomb schematics, but, it can wait.

511
00:24:54,890 --> 00:24:57,390
Thanks. Come on.

512
00:25:00,830 --> 00:25:03,376
I found these plans
sitting in an open thread

513
00:25:03,400 --> 00:25:06,100
on archive, and they're
not just blueprints.

514
00:25:06,210 --> 00:25:09,216
It's a step-by-step guide
to building a pipe bomb.

515
00:25:09,240 --> 00:25:11,110
I'm tracing everyone
who downloaded the file.

516
00:25:11,240 --> 00:25:14,556
Him questioning her in that office.

517
00:25:14,580 --> 00:25:15,910
If laroche is pulling stunts,

518
00:25:16,020 --> 00:25:17,656
that means the case against Kayla's thin.

519
00:25:17,680 --> 00:25:20,266
Maybe, but the dirty money is real.

520
00:25:20,290 --> 00:25:22,696
Kayla's Grant funding didn't all come

521
00:25:22,720 --> 00:25:24,396
from private foundations. Some of it

522
00:25:24,420 --> 00:25:25,700
was routed through a slush fund.

523
00:25:25,760 --> 00:25:28,336
Not so much "dirty" money as "opaque."

524
00:25:28,360 --> 00:25:29,960
"Dirty" plays better in a headline.

525
00:25:30,100 --> 00:25:31,906
And on laroche's résumé.

526
00:25:31,930 --> 00:25:34,276
If he can prove Kayla
knowingly took tainted funds,

527
00:25:34,300 --> 00:25:35,746
and right now, that's what it looks like.

528
00:25:35,770 --> 00:25:38,446
Her name's the only one on all

529
00:25:38,470 --> 00:25:40,640
- the filings and applications.
- You believe that?

530
00:25:40,770 --> 00:25:42,086
No, not for a second,

531
00:25:42,110 --> 00:25:44,150
but if this goes public,
belief won't matter.

532
00:25:44,280 --> 00:25:46,386
Laroche is ambitious, not reckless.

533
00:25:46,410 --> 00:25:49,126
He wouldn't move without more.

534
00:25:49,150 --> 00:25:50,526
There's more.

535
00:25:50,550 --> 00:25:52,596
Access logs just came
back on the slush fund.

536
00:25:52,620 --> 00:25:55,366
According to this, the last time

537
00:25:55,390 --> 00:25:58,066
anyone looked at the dirty money
account was two months ago.

538
00:25:58,090 --> 00:26:00,030
Tell me it wasn't Kayla.

539
00:26:03,260 --> 00:26:06,660
I don't think laroche is going after Kayla.

540
00:26:07,830 --> 00:26:11,970
The last person to access that
dirty account was your father.

541
00:26:12,100 --> 00:26:13,500
Two days before his death.

542
00:26:13,640 --> 00:26:15,980
Credentialed login.
Two-factor authentication.

543
00:26:17,010 --> 00:26:18,150
No.

544
00:26:19,050 --> 00:26:20,056
Record is clear.

545
00:26:20,080 --> 00:26:23,356
My father would never
knowingly touch dirty money.

546
00:26:23,380 --> 00:26:26,280
Perhaps he believed the
ends justified the means.

547
00:26:26,390 --> 00:26:29,166
You don't get to rewrite his
legacy based on guesses.

548
00:26:29,190 --> 00:26:31,466
Not rewriting or guessing.

549
00:26:31,490 --> 00:26:33,360
I'm following the evidence.

550
00:26:33,490 --> 00:26:36,706
A powerful man, a father, used

551
00:26:36,730 --> 00:26:40,906
untraceable funds to help his little girl.

552
00:26:40,930 --> 00:26:42,770
It's not hard to imagine.

553
00:26:43,600 --> 00:26:45,870
You're wrong. There's
another explanation.

554
00:26:46,010 --> 00:26:47,340
Then let's hear it. Otherwise,

555
00:26:47,470 --> 00:26:50,040
I have to assume you were involved.

556
00:26:52,140 --> 00:26:53,940
This interrogation is over.

557
00:26:54,050 --> 00:26:56,220
Agent Vance and I were simply talking.

558
00:26:56,350 --> 00:26:58,820
Well, from now on, you
can talk to her lawyer.

559
00:27:01,990 --> 00:27:06,230
I think I already have what I need.

560
00:27:22,370 --> 00:27:25,170
Pretty sure "sidelined"
doesn't mean overtime.

561
00:27:25,280 --> 00:27:28,486
I'm not working the case.
I'm reviewing my mistakes.

562
00:27:28,510 --> 00:27:30,410
The coffee shop. The alley.

563
00:27:30,520 --> 00:27:32,456
I missed something.

564
00:27:32,480 --> 00:27:35,296
Just like I missed the dirty money.

565
00:27:35,320 --> 00:27:37,696
You did not build a slush fund.

566
00:27:37,720 --> 00:27:41,220
Apparently, I built
something that used one.

567
00:27:42,290 --> 00:27:43,736
And my dad knew.

568
00:27:43,760 --> 00:27:46,260
Nobody believes that your
dad was moving dirty cash.

569
00:27:46,370 --> 00:27:49,910
Belief doesn't matter. Proof does.

570
00:27:53,510 --> 00:27:55,646
My dad warned me.

571
00:27:55,670 --> 00:27:58,710
The last time we talked, we argued.

572
00:27:59,450 --> 00:28:02,186
He tried to warn me
about living in two worlds.

573
00:28:02,210 --> 00:28:04,610
Things can get missed.

574
00:28:05,420 --> 00:28:07,990
Which is why I was gonna leave.

575
00:28:09,190 --> 00:28:11,760
I was gonna quit NCIS.

576
00:28:12,590 --> 00:28:13,936
I took his warning to heart.

577
00:28:13,960 --> 00:28:15,960
I was going all-in on my new initiative,

578
00:28:16,100 --> 00:28:18,070
but before I could tell him...

579
00:28:20,200 --> 00:28:22,176
he was gone.

580
00:28:22,200 --> 00:28:26,600
After that, leaving NCIS felt like betrayal.

581
00:28:27,770 --> 00:28:29,970
Like I was walking out on him twice.

582
00:28:30,110 --> 00:28:32,516
You think he'd see it that way?

583
00:28:32,540 --> 00:28:34,440
I don't know.

584
00:28:34,550 --> 00:28:36,420
And now, I never will.

585
00:28:44,290 --> 00:28:45,460
What's this?

586
00:28:45,590 --> 00:28:48,466
That's from the alley bomber's car.

587
00:28:48,490 --> 00:28:50,890
It's a cheap star wars knockoff.

588
00:28:51,000 --> 00:28:52,746
No.

589
00:28:52,770 --> 00:28:54,570
I've seen this before.

590
00:29:01,070 --> 00:29:03,170
The coffee shop bomber,
Danny hammersmith,

591
00:29:03,310 --> 00:29:04,716
he was reading this same book.

592
00:29:04,740 --> 00:29:06,156
- Kayla...
- We have to go back

593
00:29:06,180 --> 00:29:07,956
through archive. There
might be a connection.

594
00:29:07,980 --> 00:29:09,456
Kayla, you cannot work this case.

595
00:29:09,480 --> 00:29:12,156
If laroche finds out, that is your badge.

596
00:29:12,180 --> 00:29:14,650
Do not hand him that win.

597
00:29:27,130 --> 00:29:29,076
Where's Parker?

598
00:29:29,100 --> 00:29:30,676
Why? What happened?

599
00:29:30,700 --> 00:29:33,846
I traced the bomb schematics.
The last person to download them

600
00:29:33,870 --> 00:29:36,186
didn't bother to mask their ip address.

601
00:29:36,210 --> 00:29:37,650
Hank hammersmith.

602
00:29:38,680 --> 00:29:42,180
- The grieving father?
- Of last year's coffee shop bomber.

603
00:29:42,310 --> 00:29:46,250
It looks like he's picking
up where his son left off.

604
00:29:55,130 --> 00:29:56,706
Hank's cell phone is still off.

605
00:29:56,730 --> 00:29:59,476
Agents swept his home
and found bomb parts.

606
00:29:59,500 --> 00:30:03,546
Grieving father builds a bomb
and disappears. He has a target.

607
00:30:03,570 --> 00:30:05,246
Wait, so he's part of
the bombing network?

608
00:30:05,270 --> 00:30:08,016
- Or a father out for revenge.
- Against who?

609
00:30:08,040 --> 00:30:09,916
People who radicalized his son.

610
00:30:09,940 --> 00:30:12,586
Been running language
analysis on archive posts.

611
00:30:12,610 --> 00:30:13,710
Take a look at this.

612
00:30:14,950 --> 00:30:16,996
Those are the posts we got from Kayla.

613
00:30:17,020 --> 00:30:19,626
We're not supposed to use that intel.

614
00:30:19,650 --> 00:30:21,990
I know, but the same
phrases keep repeating.

615
00:30:22,120 --> 00:30:24,860
Right? "Violence is
the language of power."

616
00:30:24,990 --> 00:30:27,360
"Martyrs are the seeds of tomorrow."

617
00:30:27,490 --> 00:30:30,106
These are all lines quoted
from the same source.

618
00:30:30,130 --> 00:30:31,876
Agnors bliss.

619
00:30:31,900 --> 00:30:34,376
Yeah, book is about the
"jondafarian resistance"

620
00:30:34,400 --> 00:30:36,540
violently rising up against "the cric."

621
00:30:36,670 --> 00:30:40,716
Alien overlords who enslave
citizens with debt crystals.

622
00:30:40,740 --> 00:30:42,386
So space capitalism?

623
00:30:42,410 --> 00:30:46,456
Exactly. And "agnors bliss" is
the book's version of heaven.

624
00:30:46,480 --> 00:30:47,856
Reserved for martyrs who fight back.

625
00:30:47,880 --> 00:30:49,850
Bombers think they're dying for a cause.

626
00:30:49,980 --> 00:30:53,826
But how did they go from
space opera to pipe bombs?

627
00:30:53,850 --> 00:30:54,890
Grooming.

628
00:30:55,020 --> 00:30:57,496
Take a look at this photo
just posted online by a fan.

629
00:30:57,520 --> 00:30:59,236
That's the author, Isaac wren.

630
00:30:59,260 --> 00:31:01,536
And he's outside of the
mom-and-pop coffee shop.

631
00:31:01,560 --> 00:31:04,200
Well, timestamp matches
our stakeout from yesterday.

632
00:31:04,330 --> 00:31:06,776
It was him. The author's
our puppet master.

633
00:31:06,800 --> 00:31:08,546
- We need to bring him in.
- Knight's right, though.

634
00:31:08,570 --> 00:31:11,046
This all traces back to Kayla.
We can't use this for an arrest.

635
00:31:11,070 --> 00:31:13,916
Yeah, but we can use it to stop
a bomb. Hank saw this book,

636
00:31:13,940 --> 00:31:16,586
and if he figured out
that wren is behind this...

637
00:31:16,610 --> 00:31:18,110
The author's the target.

638
00:31:18,780 --> 00:31:20,456
Okay, Isaac wren

639
00:31:20,480 --> 00:31:23,156
is speaking at a Sci-Fi
convention downtown right now.

640
00:31:23,180 --> 00:31:24,626
All right, alert convention security.

641
00:31:24,650 --> 00:31:27,620
Have them conduct a fire evacuation.

642
00:31:29,090 --> 00:31:31,196
Attention. A fire alarm
has been activated.

643
00:31:31,220 --> 00:31:34,366
Please proceed calmly
to the nearest exit.

644
00:31:36,200 --> 00:31:37,806
Torres, McGee, south corridor.

645
00:31:37,830 --> 00:31:39,170
Knight, with me.

646
00:31:40,870 --> 00:31:43,070
Does this mean the hall h
panel has been cancelled?

647
00:31:43,200 --> 00:31:44,330
It moved. Outside.

648
00:31:44,440 --> 00:31:47,046
NCIS. Isaac wren,

649
00:31:47,070 --> 00:31:47,640
where is he?

650
00:31:47,664 --> 00:31:49,870
He was on the main stage.
He's being escorted out.

651
00:31:49,980 --> 00:31:52,416
- Escorted by who?
- One of your agents.

652
00:31:52,440 --> 00:31:54,656
She said it was a security precaution.

653
00:31:54,680 --> 00:31:55,810
Kayla.

654
00:31:57,180 --> 00:32:00,426
Two bombers died with
your book in their hands.

655
00:32:00,450 --> 00:32:01,796
I don't know what you're talking about.

656
00:32:01,820 --> 00:32:04,196
I write fiction, and that is it,

657
00:32:04,220 --> 00:32:06,436
and right now, I'm just
trying to get to my car.

658
00:32:06,460 --> 00:32:08,606
You need to come with me to NCIS.

659
00:32:08,630 --> 00:32:11,330
I'm done talking now.

660
00:32:14,800 --> 00:32:16,346
You're not just inspiring these attacks,

661
00:32:16,370 --> 00:32:18,570
you're directing them. Aren't you?

662
00:32:19,910 --> 00:32:23,810
What is that? Driver, that's not mine.

663
00:32:23,940 --> 00:32:25,810
I think it is.

664
00:32:25,940 --> 00:32:28,980
- Mr. Hammersmith?
- He's not my driver.

665
00:32:33,420 --> 00:32:35,466
- Keep moving.
- There. She's in the SUV.

666
00:32:35,490 --> 00:32:38,066
- Yeah, with our bomber.
- Wait.

667
00:32:38,090 --> 00:32:40,106
If we move in, we could spook this guy.

668
00:32:40,130 --> 00:32:41,736
And we don't know the play.

669
00:32:41,760 --> 00:32:43,936
All right, then let's find out.

670
00:32:43,960 --> 00:32:49,870
Touch that door again,
and you can die right here.

671
00:32:56,640 --> 00:32:59,156
Mr. Hammersmith, please put down

672
00:32:59,180 --> 00:33:00,850
that detonator that's in your hand.

673
00:33:03,620 --> 00:33:05,396
He killed my son.

674
00:33:05,420 --> 00:33:08,890
He filled his head with poison.

675
00:33:11,520 --> 00:33:13,466
I got a clear shot on the driver.

676
00:33:13,490 --> 00:33:16,330
Negative. You shoot,
and that detonator goes off.

677
00:33:17,230 --> 00:33:19,370
Hank, please.

678
00:33:20,400 --> 00:33:21,646
Let us help you.

679
00:33:21,670 --> 00:33:23,470
Help?

680
00:33:24,870 --> 00:33:26,386
Nobody helped my son.

681
00:33:26,410 --> 00:33:28,386
I didn't even help my son.

682
00:33:28,410 --> 00:33:30,256
It's kasie.

683
00:33:30,280 --> 00:33:32,456
You got to see this.

684
00:33:32,480 --> 00:33:35,026
The FBI pretended to
care, and then moved on.

685
00:33:35,050 --> 00:33:38,596
Danny was just a... Another statistic.

686
00:33:38,620 --> 00:33:40,390
He wasn't to me.

687
00:33:40,520 --> 00:33:42,520
Your son changed my life.

688
00:33:43,460 --> 00:33:46,166
The coffee shop attack is
the reason why I built a team

689
00:33:46,190 --> 00:33:49,706
to find kids like Danny before
people like wren get to them.

690
00:33:51,100 --> 00:33:52,876
What are you doing?

691
00:33:52,900 --> 00:33:54,206
Who are you talking to?

692
00:33:54,230 --> 00:33:55,876
People who can get justice for your son.

693
00:33:55,900 --> 00:33:57,070
You're lying.

694
00:33:57,200 --> 00:33:59,616
NCIS just pulled Isaac wren's financials.

695
00:33:59,640 --> 00:34:02,716
He shorted stocks before both bombings.

696
00:34:02,740 --> 00:34:06,256
He set the attacks in
motion and then cashed in.

697
00:34:06,280 --> 00:34:08,150
And we have the proof.

698
00:34:12,820 --> 00:34:15,090
You used my boy...

699
00:34:16,620 --> 00:34:17,996
- for money?
- No.

700
00:34:18,020 --> 00:34:19,790
No. No.

701
00:34:22,530 --> 00:34:23,830
Hank.

702
00:34:24,730 --> 00:34:26,306
Please listen to me.

703
00:34:26,330 --> 00:34:28,906
He's going to prison
for the rest of his life,

704
00:34:28,930 --> 00:34:31,500
which means you can
live the rest of yours.

705
00:34:32,900 --> 00:34:35,716
For your son.

706
00:34:38,840 --> 00:34:41,110
I-I miss him so much.

707
00:34:43,580 --> 00:34:45,620
I know what that feels like.

708
00:34:48,450 --> 00:34:50,350
But we have to move on.

709
00:34:51,590 --> 00:34:53,290
For them.

710
00:35:06,540 --> 00:35:08,110
Detonator secure.

711
00:35:13,410 --> 00:35:15,150
Hands up.

712
00:35:15,810 --> 00:35:17,096
Hey. Look, I didn't do a thing.

713
00:35:17,120 --> 00:35:18,320
The guy was trying to kill me.

714
00:35:18,450 --> 00:35:20,020
- Spin around. Hands.
- Whoa.

715
00:35:33,330 --> 00:35:35,270
Agent Parker.

716
00:35:36,070 --> 00:35:37,776
You're early.

717
00:35:37,800 --> 00:35:39,840
Isaac wren pled no contest.

718
00:35:39,970 --> 00:35:42,486
Securities fraud and domestic terrorism.

719
00:35:42,510 --> 00:35:43,980
Turns out, he was broke,

720
00:35:44,110 --> 00:35:47,456
but instead of waiting
for book royalties, he

721
00:35:47,480 --> 00:35:49,596
radicalized and then monetized

722
00:35:49,620 --> 00:35:51,356
his most passionate followers.

723
00:35:51,380 --> 00:35:55,050
Lucky for us, he didn't go into politics.

724
00:35:57,490 --> 00:35:59,306
I trust the case will stick?

725
00:35:59,330 --> 00:36:01,466
We rebuilt everything
from the ground up.

726
00:36:01,490 --> 00:36:04,136
- Nothing tied to Kayla.
- Good work.

727
00:36:04,160 --> 00:36:05,576
Tell that to Kayla.

728
00:36:05,600 --> 00:36:08,446
- She disobeyed orders.
- She stopped a bomb.

729
00:36:08,470 --> 00:36:10,516
Firing her won't play well.

730
00:36:10,540 --> 00:36:12,746
She's not being fired.

731
00:36:12,770 --> 00:36:14,810
For that or anything else.

732
00:36:15,540 --> 00:36:17,556
There's no concrete evidence
that she knew those funds

733
00:36:17,580 --> 00:36:19,286
flowing into her account were tainted,

734
00:36:19,310 --> 00:36:21,786
or that she knew her father
was the one who moved them.

735
00:36:21,810 --> 00:36:23,256
He didn't.

736
00:36:23,280 --> 00:36:25,880
There's no evidence that
Vance ever touched that money.

737
00:36:26,020 --> 00:36:29,466
So the fact it's connected
to his daughter is...

738
00:36:29,490 --> 00:36:30,766
Just a coincidence?

739
00:36:30,790 --> 00:36:32,666
I think he was looking out for her.

740
00:36:32,690 --> 00:36:36,060
Found the dirty money and
died before he could warn her.

741
00:36:36,190 --> 00:36:37,836
Interesting theory.

742
00:36:37,860 --> 00:36:40,360
Yeah, more plausible than yours.

743
00:36:42,470 --> 00:36:43,946
I agree.

744
00:36:43,970 --> 00:36:46,470
Which is why I'm
dropping my investigation.

745
00:36:47,370 --> 00:36:48,900
I thought you'd be pleased.

746
00:36:49,040 --> 00:36:51,216
You came in here guns blazing,

747
00:36:51,240 --> 00:36:53,756
making accusations,
threatening careers.

748
00:36:53,780 --> 00:36:54,910
Now, you just walk away?

749
00:36:55,050 --> 00:36:56,826
Like you said,

750
00:36:56,850 --> 00:36:58,890
there's no evidence that
Vance moved that money.

751
00:36:59,020 --> 00:37:00,766
Then who did?

752
00:37:00,790 --> 00:37:02,430
That's for someone else to find out.

753
00:37:02,550 --> 00:37:06,706
Right now, my job is to restore
confidence in this agency.

754
00:37:06,730 --> 00:37:09,136
I didn't know that was a problem.

755
00:37:09,160 --> 00:37:10,736
Well, it will be tomorrow morning,

756
00:37:10,760 --> 00:37:12,876
when news of Vance's
connection to that slush fund

757
00:37:12,900 --> 00:37:14,506
hits the media cycle.

758
00:37:14,530 --> 00:37:17,630
Thankfully, I'll be there to step in,

759
00:37:17,740 --> 00:37:20,610
publicly clear his
name, protect his legacy,

760
00:37:20,740 --> 00:37:23,616
and safeguard this institution.

761
00:37:24,640 --> 00:37:26,110
You came to play the hero. Why?

762
00:37:26,240 --> 00:37:28,056
What do you get out of all of this?

763
00:37:36,760 --> 00:37:39,966
But everything is a game
to you. Political chess.

764
00:37:39,990 --> 00:37:41,730
Then you know the rules.

765
00:37:42,590 --> 00:37:44,790
Start turning over pieces...

766
00:37:45,830 --> 00:37:47,276
we both lose.

767
00:37:47,300 --> 00:37:49,770
Me? I got nothing to hide.

768
00:37:50,640 --> 00:37:53,010
Why do I find that hard to believe?

769
00:38:03,450 --> 00:38:05,426
I figured this was neutral ground.

770
00:38:05,450 --> 00:38:08,266
For what? Laroche backed off.

771
00:38:08,290 --> 00:38:10,466
I don't have to sneak around NCIS.

772
00:38:10,490 --> 00:38:12,366
No.

773
00:38:12,390 --> 00:38:14,790
But you still have a big decision to make.

774
00:38:15,660 --> 00:38:18,460
My organization.

775
00:38:18,600 --> 00:38:21,800
The funding's tainted.
The reputation's shot.

776
00:38:22,570 --> 00:38:24,216
It needs rebuilding from scratch.

777
00:38:24,240 --> 00:38:27,286
Sounds like a full-time job.

778
00:38:27,310 --> 00:38:29,850
A job I'd love.

779
00:38:33,080 --> 00:38:35,386
But not one I'm sure I can take.

780
00:38:35,410 --> 00:38:37,810
Well, while you decide...

781
00:38:37,920 --> 00:38:39,926
You said that you miss
your monthly boxing sessions

782
00:38:39,950 --> 00:38:41,196
with your dad.

783
00:38:41,220 --> 00:38:44,036
Looking for a new, sparring partner?

784
00:38:44,060 --> 00:38:45,666
You serious?

785
00:38:45,690 --> 00:38:48,336
Well, I mean, I'm no Leon
Vance, but I got my gear in the car.

786
00:38:48,360 --> 00:38:51,736
Well, before you grab it, let
me make sure mine's still here.

787
00:38:51,760 --> 00:38:54,400
Like I said, I haven't
been back in months.

788
00:39:01,570 --> 00:39:03,240
My god.

789
00:39:04,080 --> 00:39:05,250
Everything okay?

790
00:39:06,210 --> 00:39:08,250
That's his handwriting.

791
00:39:12,120 --> 00:39:13,760
It's from my dad.

792
00:39:15,350 --> 00:39:18,620
He must've left it here
after our last session.

793
00:39:26,360 --> 00:39:31,710
It's an NCIS discharge
form with my name on it.

794
00:39:32,540 --> 00:39:34,340
He filled it out and signed it.

795
00:39:39,680 --> 00:39:42,220
Dated just before he died.

796
00:39:52,020 --> 00:39:54,120
He wasn't choosing for me.

797
00:39:58,900 --> 00:40:01,400
He was making room for you to choose.

798
00:40:17,020 --> 00:40:18,250
What up, Jimmy?

799
00:40:18,380 --> 00:40:20,326
You're adding something
to the wall of fame?

800
00:40:20,350 --> 00:40:21,926
Yeah, like father, like daughter.

801
00:40:21,950 --> 00:40:24,350
Yeah, who knows, maybe
Mateo will be up here soon.

802
00:40:24,460 --> 00:40:27,906
Well, after his visit, he
didn't seem too convinced.

803
00:40:27,930 --> 00:40:30,506
Yeah, that's what I thought,
but then, Curtis called me.

804
00:40:30,530 --> 00:40:32,436
He said that, right after I left,

805
00:40:32,460 --> 00:40:34,060
that Mateo asked to use a workstation

806
00:40:34,170 --> 00:40:36,446
to fill out an internship application.

807
00:40:39,240 --> 00:40:40,810
That's not what he said to his dad.

808
00:40:40,940 --> 00:40:43,280
Maybe he wants to keep it a surprise.

809
00:40:44,080 --> 00:40:47,356
Or, maybe, like Kayla,

810
00:40:47,380 --> 00:40:49,780
he just wants to earn it on his own.

811
00:40:51,150 --> 00:40:53,766
- Have a good night, Nick.
- Don't tell me what to do.

812
00:40:53,790 --> 00:40:55,130
Okay.

813
00:41:22,910 --> 00:41:24,650
Hey. Mateo.

814
00:41:25,980 --> 00:41:27,350
Wait up.

815
00:41:28,490 --> 00:41:31,330
Agent torres? What are you doing here?

816
00:41:31,460 --> 00:41:33,196
We need to talk.

817
00:41:33,220 --> 00:41:34,660
About what?

818
00:41:34,790 --> 00:41:38,190
About your internship application.

819
00:41:39,700 --> 00:41:41,376
Why?

820
00:41:41,400 --> 00:41:45,776
Like I told my dad, NCIS isn't for me.

821
00:41:45,800 --> 00:41:48,400
Yeah, well, that's not
what you told Curtis.

822
00:41:48,510 --> 00:41:52,786
Well, I started an
application, and then, I...

823
00:41:52,810 --> 00:41:54,440
Changed my mind. Can I go now?

824
00:41:54,550 --> 00:41:56,756
What were you doing
at that workstation?

825
00:41:56,780 --> 00:41:58,426
Nothing.

826
00:41:58,450 --> 00:42:00,090
Drop it.

827
00:42:01,750 --> 00:42:03,196
Why are you lying to me?

828
00:42:03,220 --> 00:42:06,120
I said drop it.

829
00:42:09,700 --> 00:42:11,940
Mateo, keep your hands
where I can see them.

830
00:42:14,370 --> 00:42:17,670
Turn around and walk away. They...

831
00:42:18,500 --> 00:42:19,900
they could be watching.

832
00:42:20,010 --> 00:42:21,610
Who could be watching?

833
00:42:22,440 --> 00:42:24,286
Don't make me do this.

834
00:42:24,310 --> 00:42:26,880
Mateo, don't.

835
00:42:31,450 --> 00:42:33,950
Don't do it.

836
00:42:41,160 --> 00:42:46,306
Captioning sponsored by and Toyota.

837
00:42:46,330 --> 00:42:48,770
Captioned by media access
group at wgbh access.Wgbh.Org

