1
00:00:06,828 --> 00:00:07,929
Look, I'm telling you guys,
2
00:00:08,029 --> 00:00:09,398
Deputy Director Laroche
is dirty.
3
00:00:09,498 --> 00:00:11,133
It's time you know the truth.
4
00:00:11,233 --> 00:00:14,035
He was a double agent working
for SecDef this entire time.
5
00:00:14,136 --> 00:00:17,972
Olivia Garcia...
she's an old girlfriend of mine.
6
00:00:18,039 --> 00:00:20,909
My name is Mateo.
I'm 18 years old.
7
00:00:21,009 --> 00:00:22,211
Why didn't you tell me
I had a son?
8
00:00:22,311 --> 00:00:24,913
I know. And I'm sorry.
9
00:00:25,013 --> 00:00:27,982
I would like to be a part
of Mateo's life.
10
00:00:30,018 --> 00:00:32,020
You didn't give up
your life for nothing,
11
00:00:32,121 --> 00:00:35,390
dear boy, you saved your agency.
12
00:00:35,524 --> 00:00:36,791
To Leon.
13
00:00:42,164 --> 00:00:45,567
All right, order
for Stephen with a P-H,
14
00:00:45,667 --> 00:00:47,702
Jenn with two Ns, and
15
00:00:47,769 --> 00:00:50,405
sadly, just Mike.
16
00:00:50,505 --> 00:00:51,840
Here you go.
17
00:00:51,940 --> 00:00:53,275
Oh. It's a capital morning
18
00:00:53,375 --> 00:00:54,943
at Capitol Oaks Coffee.
How may I help you?
19
00:00:55,076 --> 00:00:56,545
Mobile order for Kayla.
20
00:00:57,412 --> 00:00:59,948
- With a "K."
- Coming right up.
21
00:01:02,651 --> 00:01:04,553
Sorry. He's got a strong arm.
22
00:01:07,756 --> 00:01:09,090
Here you go, cutie.
23
00:01:09,891 --> 00:01:11,193
Aw, it's...
24
00:01:11,293 --> 00:01:12,661
Oh, he sees your badge.
25
00:01:12,761 --> 00:01:13,862
Thinks you're a superhero.
26
00:01:13,962 --> 00:01:17,266
Oh, smart kid. What's his name?
27
00:01:17,399 --> 00:01:20,001
- Evan.
- Well, Evan.
28
00:01:21,570 --> 00:01:24,105
You can be a superhero, too.
29
00:01:24,206 --> 00:01:26,408
- Sound good?
- Thanks.
30
00:01:26,508 --> 00:01:29,911
- You're welcome.
- Order for Kayla with a "K."
31
00:01:31,746 --> 00:01:33,415
Have a capital day.
32
00:01:37,552 --> 00:01:39,087
Duty calls.
33
00:01:39,888 --> 00:01:41,089
See you around, Evan.
34
00:01:41,156 --> 00:01:42,991
Bye.
35
00:01:47,629 --> 00:01:48,597
You couldn't text, Director?
36
00:01:48,697 --> 00:01:51,065
I'm calling as Dad.
37
00:01:51,166 --> 00:01:52,634
We still on for dinner?
38
00:01:52,734 --> 00:01:54,135
Well...
39
00:01:54,269 --> 00:01:55,970
it depends. Who's picking?
40
00:01:56,070 --> 00:01:57,472
I am.
41
00:01:57,572 --> 00:02:00,309
In that case, I'm busy.
42
00:02:04,979 --> 00:02:06,881
Kayla.
43
00:02:08,617 --> 00:02:10,319
Kayla!
44
00:03:02,203 --> 00:03:04,038
Started without me.
45
00:03:05,307 --> 00:03:07,008
You're still
having trouble sleeping?
46
00:03:07,108 --> 00:03:09,744
- I'm fine.
- It's been a month.
47
00:03:09,844 --> 00:03:13,214
You barely walked away
from a suicide bombing.
48
00:03:15,717 --> 00:03:18,587
Other people didn't.
49
00:03:21,990 --> 00:03:23,892
Well, maybe this will help.
50
00:03:24,626 --> 00:03:27,796
The FBI and ATF
just closed the case.
51
00:03:29,063 --> 00:03:30,299
And their conclusion?
52
00:03:30,399 --> 00:03:33,568
A disturbed kid with a bomb
in his backpack.
53
00:03:33,668 --> 00:03:34,736
A lone wolf.
54
00:03:34,869 --> 00:03:37,606
- Lone?
- Yes.
55
00:03:37,739 --> 00:03:39,508
I read the ATF report.
56
00:03:39,574 --> 00:03:42,844
That bomb was sophisticated.
Professional.
57
00:03:42,911 --> 00:03:45,747
It had parts you can't
just buy at Home Depot.
58
00:03:45,847 --> 00:03:48,683
This wasn't just some kid
googling at 3:00 a.m.
59
00:03:48,783 --> 00:03:51,286
This was training. Or guidance.
60
00:03:51,420 --> 00:03:54,523
- Or both.
- Now...
61
00:03:54,589 --> 00:03:56,958
- you're making assumptions.
- No. They are.
62
00:03:57,091 --> 00:03:59,127
They missed something.
63
00:04:00,128 --> 00:04:01,996
Just like I did.
64
00:04:02,096 --> 00:04:04,299
Kayla.
65
00:04:04,399 --> 00:04:06,835
It's not your fault.
66
00:04:06,935 --> 00:04:09,971
Sometimes agents
don't see everything.
67
00:04:11,272 --> 00:04:13,308
If the FBI misreads
this bombing,
68
00:04:13,442 --> 00:04:15,377
they'll misread the next one.
69
00:04:16,745 --> 00:04:18,847
What if this wasn't a one-off?
70
00:04:21,282 --> 00:04:22,784
Kayla.
71
00:04:24,118 --> 00:04:25,987
What do you want?
72
00:04:27,288 --> 00:04:28,523
I want to do everything I can
73
00:04:28,623 --> 00:04:31,626
to make sure
it never happens again.
74
00:04:35,930 --> 00:04:40,469
MPD says the vehicle belongs to
Navy Petty Officer Victor Lee.
75
00:04:40,569 --> 00:04:42,937
Worked at the
Naval Research Lab.
76
00:04:43,004 --> 00:04:45,774
Pretty sure this man
was carrying the explosive.
77
00:04:45,874 --> 00:04:48,009
Extensive damage to the torso.
78
00:04:48,142 --> 00:04:50,679
A piece of fabric
fused to his shoulder.
79
00:04:50,812 --> 00:04:54,849
Looks like it could be remnants
of a bag or a backpack.
80
00:04:55,817 --> 00:04:58,887
Young man. Backpack bomb.
Sounds familiar.
81
00:04:58,987 --> 00:05:00,889
Coffee shop bombing
from last year.
82
00:05:00,989 --> 00:05:02,857
Yeah, and FBI thought
that was a lone wolf.
83
00:05:02,991 --> 00:05:04,859
Well, maybe the lone wolf
had some friends.
84
00:05:04,993 --> 00:05:07,596
Careless ones 'cause unless
their target was an empty alley,
85
00:05:07,662 --> 00:05:09,431
I'd say the device
went off early.
86
00:05:09,998 --> 00:05:11,733
Then what was the real target?
87
00:05:12,767 --> 00:05:14,636
Phone and laptop
aren't gonna help.
88
00:05:17,271 --> 00:05:19,608
Is that Mateo?
89
00:05:20,375 --> 00:05:22,210
Ah, you guys are getting
thick as thieves.
90
00:05:22,310 --> 00:05:24,345
Yeah, we've been bonding lately.
91
00:05:24,479 --> 00:05:27,015
So what is it?
Baseball? Laser tag?
92
00:05:27,148 --> 00:05:29,050
- Geohash.
- Oh.
93
00:05:29,150 --> 00:05:30,685
I am so afraid to ask.
94
00:05:30,819 --> 00:05:32,421
Geohash is a form of coding.
Latitude
95
00:05:32,521 --> 00:05:34,556
and longitude compressed.
I'll tell you what, this kid
96
00:05:34,656 --> 00:05:36,625
got some pretty amazing
computer skills.
97
00:05:36,725 --> 00:05:38,860
Hmm. Who could've guessed that?
98
00:05:38,993 --> 00:05:40,962
Even told him about the
internship program, you know,
99
00:05:41,029 --> 00:05:44,165
in NCIS Cyber, so Mateo's gonna
come by tomorrow, take a tour.
100
00:05:45,133 --> 00:05:46,067
That's a big step.
101
00:05:46,200 --> 00:05:47,902
But it's just a tour. You know?
102
00:05:48,002 --> 00:05:49,904
Don't know for sure
that it's gonna happen.
103
00:05:50,038 --> 00:05:52,607
We got a Navy bomber
to deal with here.
104
00:05:52,707 --> 00:05:54,208
Negative on the Navy part.
105
00:05:54,342 --> 00:05:55,944
Petty Officer Lee
is alive and well.
106
00:05:56,044 --> 00:05:57,546
Currently holding Warrior Two
107
00:05:57,646 --> 00:05:59,914
in a hot yoga class
two blocks over.
108
00:06:00,014 --> 00:06:02,383
If our bomber isn't Navy,
who is he?
109
00:06:03,151 --> 00:06:06,087
Got one wallet here.
Extra crispy.
110
00:06:08,156 --> 00:06:11,225
Ryan or Bryan Wallace. 19.
111
00:06:11,325 --> 00:06:12,527
Organ donor.
112
00:06:12,627 --> 00:06:14,563
I'd say the ship has sailed
on that one.
113
00:06:14,663 --> 00:06:15,864
Oh, Ryan Wallace.
114
00:06:15,964 --> 00:06:17,466
Lives in Reston.
115
00:06:17,566 --> 00:06:19,968
Uh, registered vehicle's
a blue Honda.
116
00:06:20,769 --> 00:06:22,403
You mean like that one?
117
00:06:22,504 --> 00:06:25,406
Oh. Uh, yeah, could be.
118
00:06:26,274 --> 00:06:27,642
Be careful.
119
00:06:29,711 --> 00:06:32,346
Maybe our bomber
left behind something useful,
120
00:06:32,447 --> 00:06:34,382
like info on his actual target.
121
00:06:34,483 --> 00:06:35,850
Targets. Plural.
122
00:06:35,917 --> 00:06:39,387
Better clear the area.
Get the bomb squad back in here.
123
00:06:40,455 --> 00:06:44,192
I don't think those backpacks
are filled with school supplies.
124
00:06:50,364 --> 00:06:52,467
I found a manufacturing defect.
125
00:06:52,534 --> 00:06:55,169
This capacitor was cracked
before the explosion,
126
00:06:55,269 --> 00:06:57,539
causing the premature detonation
in the alley.
127
00:06:57,639 --> 00:06:59,173
Mm, bad luck for the bomber.
128
00:06:59,307 --> 00:07:02,043
Very good luck
for everyone else.
129
00:07:02,143 --> 00:07:05,947
Because the other six devices...
all fully functional.
130
00:07:06,047 --> 00:07:07,649
If he had made it
to his targets...
131
00:07:07,749 --> 00:07:10,919
We would be counting dozens
of bodies, not just his.
132
00:07:11,019 --> 00:07:14,689
I confirmed our bomber's DNA...
Ryan Wallace.
133
00:07:14,823 --> 00:07:17,892
- 19. Single. No next of kin.
- Device data?
134
00:07:17,992 --> 00:07:21,062
Laptop and phone were completely
destroyed in the blast.
135
00:07:21,195 --> 00:07:23,632
Apartment was basically
a mattress and a router.
136
00:07:23,698 --> 00:07:26,935
All we've got are the contents
of his car.
137
00:07:27,035 --> 00:07:30,539
Trash, receipts, and this.
138
00:07:30,672 --> 00:07:32,306
Agnors Bliss.
139
00:07:32,406 --> 00:07:35,510
It's a sci-fi space opera that's
a little too niche, even for me,
140
00:07:35,577 --> 00:07:37,178
and I read the Dune glossary.
141
00:07:37,278 --> 00:07:38,379
So we've got nothing?
142
00:07:38,513 --> 00:07:40,181
Not nothing. Keep walking.
143
00:07:40,248 --> 00:07:43,451
I compared
all of the alley bombs
144
00:07:43,552 --> 00:07:45,419
to last year's
coffee shop device.
145
00:07:45,554 --> 00:07:47,989
Same parts.
Same soldering technique.
146
00:07:48,089 --> 00:07:49,357
Same assembly sequence.
147
00:07:49,457 --> 00:07:50,559
That's not a coincidence.
148
00:07:50,659 --> 00:07:52,661
Oh, no. That's a signature.
149
00:07:52,761 --> 00:07:54,696
Someone's training people
to build these.
150
00:07:54,763 --> 00:07:56,865
So it's not one bomber,
it's a network.
151
00:07:56,965 --> 00:07:59,901
Which means we need to reopen
the FBI's coffee shop case.
152
00:08:00,001 --> 00:08:01,703
Figure out what got missed.
153
00:08:01,803 --> 00:08:03,772
I already pulled
the original witness list,
154
00:08:03,905 --> 00:08:06,775
and look who's on it.
155
00:08:06,875 --> 00:08:08,843
The director's daughter
was there?
156
00:08:08,910 --> 00:08:11,212
Mm, according to this,
she stepped outside
157
00:08:11,312 --> 00:08:13,081
just before the blast.
158
00:08:13,214 --> 00:08:15,416
- And we never heard about it?
- Oh, Vance and Kayla probably wanted
159
00:08:15,516 --> 00:08:18,086
to avoid the media attention.
160
00:08:18,186 --> 00:08:21,055
Haven't seen her
since his funeral.
161
00:08:21,155 --> 00:08:22,724
I heard she took personal leave.
162
00:08:22,791 --> 00:08:25,093
Okay, so maybe
we don't make Kayla relive
163
00:08:25,193 --> 00:08:26,527
the day that almost killed her.
164
00:08:26,628 --> 00:08:29,063
There are plenty of others
to start with.
165
00:08:29,163 --> 00:08:30,599
Maybe they can help.
166
00:08:30,732 --> 00:08:33,034
The FBI was wrong
about that coffee shop.
167
00:08:33,134 --> 00:08:35,770
They called my son a lone wolf.
My Danny
168
00:08:35,870 --> 00:08:38,239
detonated that bomb...
I'm not denying that...
169
00:08:38,339 --> 00:08:39,974
but he didn't do it on his own.
170
00:08:40,074 --> 00:08:43,544
NCIS agrees, Mr. Hammersmith.
171
00:08:45,546 --> 00:08:47,949
Uh, call me Hank.
172
00:08:48,082 --> 00:08:49,651
Listen, Hank,
we are investigating
173
00:08:49,784 --> 00:08:52,821
a second backpack bombing.
We believe
174
00:08:52,954 --> 00:08:55,857
that it may be connected
to the one from last year.
175
00:08:55,957 --> 00:08:58,392
I knew it wasn't just Danny.
176
00:08:58,459 --> 00:09:02,396
Well, these are the items
that we recovered...
177
00:09:02,496 --> 00:09:04,132
from the latest bomber.
178
00:09:05,399 --> 00:09:06,668
Does anything look familiar?
179
00:09:06,768 --> 00:09:09,003
Anything connect to your son?
180
00:09:09,804 --> 00:09:12,140
None of this rings a bell.
181
00:09:12,240 --> 00:09:14,275
Danny...
182
00:09:14,342 --> 00:09:17,211
kept things to himself.
183
00:09:17,311 --> 00:09:19,013
His whole life was online.
184
00:09:19,147 --> 00:09:22,651
He talked about chatting
with friends,
185
00:09:22,751 --> 00:09:27,221
but I never bothered
to check in.
186
00:09:29,223 --> 00:09:31,860
Told myself it was just a phase.
187
00:09:31,993 --> 00:09:35,129
The mood swings, the anger, him
188
00:09:35,196 --> 00:09:39,133
pulling away from family.
189
00:09:39,233 --> 00:09:42,871
Whatever was going on
with my son, I missed it.
190
00:09:42,971 --> 00:09:48,409
It's hard to know what's going
on in any teenager's head.
191
00:09:50,144 --> 00:09:51,846
But I could have asked.
192
00:09:53,214 --> 00:09:55,216
Don't let me keep you.
193
00:09:56,517 --> 00:09:59,487
Oh. It's, uh,
it's actually my son.
194
00:09:59,587 --> 00:10:01,189
Just checked in
for an internship tour.
195
00:10:01,289 --> 00:10:03,858
That's good.
196
00:10:03,958 --> 00:10:05,960
Stay close.
197
00:10:06,027 --> 00:10:08,763
If family doesn't
fill the space...
198
00:10:09,898 --> 00:10:11,700
...someone else will.
199
00:10:11,833 --> 00:10:15,937
Like these, uh, "friends"
your son met online?
200
00:10:16,037 --> 00:10:19,708
Yeah. On that website Archive.
201
00:10:19,841 --> 00:10:22,410
That's where he said
they talked.
202
00:10:23,544 --> 00:10:26,681
Archive is a private online
community. Invitation-only.
203
00:10:26,781 --> 00:10:28,883
FBI looked at this last year.
204
00:10:28,983 --> 00:10:30,418
They only checked the lobby.
205
00:10:30,518 --> 00:10:32,787
I found an encrypted back room
206
00:10:32,887 --> 00:10:34,989
where the real
conversations happen.
207
00:10:35,089 --> 00:10:36,590
Isolated, angry young men
208
00:10:36,691 --> 00:10:39,093
find each other,
validate each other, and spiral.
209
00:10:39,227 --> 00:10:41,029
Only managed a glimpse so far,
210
00:10:41,095 --> 00:10:42,596
but I'm tracing traffic spikes.
211
00:10:42,731 --> 00:10:45,934
Sorry to interrupt.
Uh, you guys remember Mateo.
212
00:10:46,034 --> 00:10:47,435
How could we forget?
213
00:10:47,568 --> 00:10:50,438
Last time you were here
was eventful.
214
00:10:50,571 --> 00:10:53,141
Yeah, well, you guys
saved my mom's life.
215
00:10:53,241 --> 00:10:56,477
She says that I should thank you
every chance that I get.
216
00:10:56,577 --> 00:10:57,779
Well, then
she's raising you right.
217
00:10:57,912 --> 00:10:59,080
Though I'm guessing
she's not the one
218
00:10:59,213 --> 00:11:00,381
who taught you geohashing.
219
00:11:00,448 --> 00:11:02,250
Actually, Mateo taught himself.
220
00:11:02,383 --> 00:11:04,919
He, uh, also
taught himself Python,
221
00:11:05,019 --> 00:11:08,422
- C .
- Right. Dad, you're doing the thing again.
222
00:11:08,556 --> 00:11:13,294
- What, bragging? - Saying tech stuff that
nobody else understands.
223
00:11:13,427 --> 00:11:14,362
Oh.
224
00:11:14,428 --> 00:11:16,664
Ooh, hold my beer.
225
00:11:16,765 --> 00:11:18,767
I am about to go
full technobabble.
226
00:11:18,867 --> 00:11:20,168
My server trace just came back.
227
00:11:20,268 --> 00:11:22,971
Archive's traffic
is bouncing through
228
00:11:23,071 --> 00:11:25,039
a physical relay node
in Bethesda.
229
00:11:25,139 --> 00:11:27,441
- It's a server farm.
- I know that corner.
230
00:11:27,541 --> 00:11:31,445
Used to be a flower shop.
Best peonies in the tristate.
231
00:11:31,545 --> 00:11:34,783
Point being it closed last year.
Been vacant ever since.
232
00:11:34,883 --> 00:11:36,317
Apparently not.
233
00:11:36,417 --> 00:11:39,954
According to GPS,
our alley bomber's Honda was
234
00:11:40,054 --> 00:11:42,824
parked at that address
the day before the explosion.
235
00:11:42,924 --> 00:11:44,793
Okay, so it's not a flower shop.
236
00:11:44,893 --> 00:11:46,795
Uh, more like
backpack bomber HQ.
237
00:11:46,928 --> 00:11:48,696
All right, let's find out.
Grab your gear.
238
00:11:48,797 --> 00:11:50,364
All right, well...
239
00:11:50,464 --> 00:11:52,133
Mateo, sorry, I didn't think
we were gonna jump into this
240
00:11:52,233 --> 00:11:54,302
- so quick.
- No. No. Go.
241
00:11:54,402 --> 00:11:56,737
Uh, this totally
beats a tour. Go.
242
00:11:56,805 --> 00:11:58,940
I'll get him down to Jimmy.
That man
243
00:11:59,007 --> 00:12:02,343
- lives to play a tour guide.
- Nice. Thanks, Kase. All right.
244
00:12:09,918 --> 00:12:11,953
- Federal agents. Hands up.
- What?
245
00:12:12,053 --> 00:12:13,988
Hands now!
246
00:12:14,088 --> 00:12:15,456
NCIS.
247
00:12:15,556 --> 00:12:19,427
O-Okay. We're cooperating.
This has to be a mistake.
248
00:12:19,994 --> 00:12:21,362
Not from where I'm standing.
249
00:12:22,196 --> 00:12:24,198
- You need to talk to the boss.
- The boss?
250
00:12:24,332 --> 00:12:27,601
Easy. Let me see your hands.
251
00:12:27,701 --> 00:12:30,071
Whatever you say, Agent Knight.
252
00:12:32,773 --> 00:12:34,876
Kayla?
253
00:12:42,716 --> 00:12:44,618
One.
254
00:12:44,685 --> 00:12:45,854
One, two.
255
00:12:45,954 --> 00:12:47,521
One, two, three.
256
00:12:47,621 --> 00:12:50,158
You've been late for two force
protection briefings this week.
257
00:12:50,892 --> 00:12:53,027
You left early yesterday.
258
00:12:53,161 --> 00:12:55,229
Took three calls in the middle
of a security update.
259
00:12:55,363 --> 00:12:56,898
Is this mitt work
or a performance review?
260
00:12:57,031 --> 00:12:58,799
Keep your guard up.
261
00:12:58,867 --> 00:13:00,935
Distraction makes you
vulnerable. Let's go.
262
00:13:03,104 --> 00:13:04,472
You've been moonlighting.
263
00:13:05,706 --> 00:13:07,675
Are you having me followed?
264
00:13:09,143 --> 00:13:10,344
I'm the director
of a federal agency
265
00:13:10,444 --> 00:13:11,379
and I'm also your father.
266
00:13:11,479 --> 00:13:13,781
It's my job to know things.
267
00:13:13,882 --> 00:13:18,386
You've been building a private
operation outside NCIS.
268
00:13:24,525 --> 00:13:27,461
Moonlighting is against
agency policy, Kayla.
269
00:13:27,561 --> 00:13:30,331
And doing it as the director's
daughter, that's worse.
270
00:13:30,398 --> 00:13:33,434
We're not hacking banks
or wiretapping phones.
271
00:13:33,567 --> 00:13:36,170
My group monitors
online activity.
272
00:13:36,270 --> 00:13:38,472
Creating accounts
and using aliases
273
00:13:38,572 --> 00:13:40,374
to infiltrate
extremist chat rooms.
274
00:13:40,441 --> 00:13:42,776
Something that most agencies
already do.
275
00:13:42,911 --> 00:13:44,712
Not like this. I checked.
276
00:13:44,812 --> 00:13:48,349
They only look for threats.
We look for patterns,
277
00:13:48,449 --> 00:13:50,084
people on the path to violence,
278
00:13:50,184 --> 00:13:52,053
so we can stop them
before they get there.
279
00:13:52,153 --> 00:13:55,023
It's not easy. Or cheap.
280
00:13:55,123 --> 00:13:57,058
I applied
for private grant money.
281
00:13:57,125 --> 00:13:59,793
Totally legal.
Fully independent.
282
00:13:59,928 --> 00:14:02,063
Very smart.
283
00:14:02,863 --> 00:14:05,433
So you're not gonna tell me
to shut it down?
284
00:14:05,533 --> 00:14:06,834
No.
285
00:14:08,036 --> 00:14:10,138
But you can't live
in two worlds.
286
00:14:10,238 --> 00:14:13,007
There's a reason
it's against policy.
287
00:14:13,107 --> 00:14:14,642
Things get missed.
288
00:14:14,742 --> 00:14:17,645
First you didn't want me
working at NCIS at all.
289
00:14:17,745 --> 00:14:19,914
Now you only want me
working at NCIS?
290
00:14:20,014 --> 00:14:21,782
You've earned your place.
291
00:14:21,882 --> 00:14:23,451
You have a future.
292
00:14:23,551 --> 00:14:26,287
Maybe even in
the director's chair one day.
293
00:14:26,387 --> 00:14:29,823
Wow. Seems like my future's
already been decided.
294
00:14:29,958 --> 00:14:32,826
- Kayla.
- What about what I want?
295
00:14:35,496 --> 00:14:37,999
What do you want?
296
00:14:42,803 --> 00:14:43,972
We're not building bombs.
297
00:14:44,105 --> 00:14:45,639
We're trying to stop them.
298
00:14:45,739 --> 00:14:47,875
We monitor
extremist rhetoric online.
299
00:14:47,976 --> 00:14:49,710
Separate noise
from credible threat.
300
00:14:49,810 --> 00:14:52,180
Then pass leads
to the appropriate agencies.
301
00:14:52,313 --> 00:14:53,647
How come
we haven't heard of you?
302
00:14:53,781 --> 00:14:55,249
We're privately funded,
303
00:14:55,349 --> 00:14:57,185
and not hearing about us
is the whole point.
304
00:14:57,285 --> 00:15:00,521
When do you have time for
all this? You're still an agent.
305
00:15:00,621 --> 00:15:03,257
I can do both. I'm good at it.
306
00:15:03,357 --> 00:15:04,925
Maybe too good.
307
00:15:05,026 --> 00:15:08,696
Our latest alley bomber was
parked outside this storefront.
308
00:15:08,829 --> 00:15:12,100
We thought he was using
this place as a staging ground.
309
00:15:12,166 --> 00:15:14,102
Now it looks
like he was casing it.
310
00:15:14,202 --> 00:15:17,571
One of these bombs was likely
meant for you and your team.
311
00:15:18,472 --> 00:15:21,175
That's not entirely bad news.
312
00:15:21,275 --> 00:15:22,510
It's not?
313
00:15:22,610 --> 00:15:24,112
If someone's targeting us,
314
00:15:24,178 --> 00:15:25,579
it means we struck a nerve.
315
00:15:25,679 --> 00:15:28,382
Which proves I was right
to build this operation.
316
00:15:28,482 --> 00:15:30,018
These attacks aren't isolated.
317
00:15:30,118 --> 00:15:31,752
Your people are still in danger.
318
00:15:31,852 --> 00:15:35,189
You need to consider
their safety.
319
00:15:37,025 --> 00:15:38,292
Emergency shutdown.
320
00:15:38,392 --> 00:15:41,462
Go home and wait
for further instructions.
321
00:15:41,562 --> 00:15:42,997
What about you?
322
00:15:43,097 --> 00:15:44,565
I'm not going home.
323
00:15:44,698 --> 00:15:48,102
I'm going back to NCIS.
We've got work to do.
324
00:15:49,670 --> 00:15:51,372
"Okay, we are now entering
325
00:15:51,472 --> 00:15:53,641
the main
Cyber operations bullpen."
326
00:15:53,741 --> 00:15:56,810
Um, Dr. Palmer, you really don't
have to read from the cards.
327
00:15:56,910 --> 00:16:00,814
Well, Kasie insisted that I stay
on script, so...
328
00:16:00,914 --> 00:16:03,884
Uh, "If accepted
into our internship program,
329
00:16:03,984 --> 00:16:05,419
you would work here."
330
00:16:05,553 --> 00:16:07,521
That is a lot of screens.
331
00:16:07,621 --> 00:16:09,823
Oh, yeah, yeah.
We-we love our screens.
332
00:16:10,591 --> 00:16:13,394
So, are you thinking about, uh,
cybersecurity as a career?
333
00:16:13,527 --> 00:16:18,032
Uh, honestly never thought
about it at all
334
00:16:18,099 --> 00:16:21,069
until recently.
335
00:16:21,169 --> 00:16:22,236
Mm.
336
00:16:22,370 --> 00:16:24,138
I'm sorry.
The cards say that Curtis
337
00:16:24,238 --> 00:16:25,739
is supposed to take over
from here, and I don't
338
00:16:25,839 --> 00:16:28,309
see a Curtis, so, um...
339
00:16:28,409 --> 00:16:31,011
Tell you what, you stay put,
340
00:16:31,079 --> 00:16:32,913
and I will track him down.
341
00:16:37,585 --> 00:16:39,187
You would be great down here.
342
00:16:39,287 --> 00:16:40,588
Agent Torres.
343
00:16:40,688 --> 00:16:42,556
You gonna be my next tour guide?
344
00:16:42,656 --> 00:16:44,592
Oh, no. No, no, no.
345
00:16:44,692 --> 00:16:47,361
Just came to grab
some reports from Cyber.
346
00:16:47,428 --> 00:16:50,164
But if you got that tech gene
from your dad...
347
00:16:51,365 --> 00:16:53,234
...we could use
someone like you.
348
00:16:54,268 --> 00:16:57,037
I very much doubt that.
349
00:16:57,138 --> 00:16:58,706
Hey.
350
00:16:59,940 --> 00:17:01,075
You good?
351
00:17:01,175 --> 00:17:03,043
Yeah. Yeah.
352
00:17:03,111 --> 00:17:04,912
It's just this place... NCIS.
353
00:17:04,978 --> 00:17:09,617
It... The... the weight of it
can be a little overwhelming.
354
00:17:09,717 --> 00:17:11,385
You know?
355
00:17:12,886 --> 00:17:14,722
Yeah.
356
00:17:14,822 --> 00:17:17,057
When we went back
and analyzed the traffic
357
00:17:17,158 --> 00:17:20,094
after the coffee shop attack,
Archive chatter had surged.
358
00:17:20,194 --> 00:17:22,963
Anger. Validation. Escalation.
359
00:17:23,097 --> 00:17:25,633
- What about the alley bombing?
- The opposite.
360
00:17:25,733 --> 00:17:28,001
Traffic fell into what we call
a "coordinated quiet."
361
00:17:28,136 --> 00:17:30,671
- Everybody knows something's up.
- So they stay low.
362
00:17:30,771 --> 00:17:33,107
My group knew
a storm was coming.
363
00:17:33,207 --> 00:17:36,444
Just not where. We missed it.
364
00:17:36,510 --> 00:17:38,846
So what's fueling this storm?
Why are these guys so angry?
365
00:17:38,946 --> 00:17:40,114
Anti-corporate rage.
366
00:17:40,214 --> 00:17:42,316
Young men who feel
powerless and invisible.
367
00:17:42,416 --> 00:17:45,619
They think that big companies
are in control of their jobs,
368
00:17:45,686 --> 00:17:48,456
their debt, their future, and
that's why they can't get ahead.
369
00:17:48,522 --> 00:17:51,159
The coffee shop
was a, a corporate chain.
370
00:17:51,292 --> 00:17:52,526
Exactly.
371
00:17:52,626 --> 00:17:54,462
And around the corner
from your alley bombing?
372
00:17:54,562 --> 00:17:56,164
A major corporate headquarters.
373
00:17:56,264 --> 00:17:59,032
Coordinated symbolism.
Identical bomb building.
374
00:17:59,133 --> 00:18:01,001
Someone is leading this group.
375
00:18:01,135 --> 00:18:04,505
More like instructing them.
Grooming them.
376
00:18:04,605 --> 00:18:07,341
- Fueling their anger.
- What, you got a name?
377
00:18:07,441 --> 00:18:08,476
I've got five.
378
00:18:08,542 --> 00:18:10,144
All influential usernames.
379
00:18:10,211 --> 00:18:11,545
No real identities yet,
380
00:18:11,645 --> 00:18:13,147
but that's where I was hoping
NCIS could help.
381
00:18:13,214 --> 00:18:15,048
Kasie and McGee
are already digging in.
382
00:18:15,149 --> 00:18:16,450
And we struck gold.
383
00:18:16,517 --> 00:18:19,187
No real names yet,
but all five usernames share
384
00:18:19,287 --> 00:18:21,455
the same encryption fingerprint,
same key and checksum.
385
00:18:21,522 --> 00:18:24,057
He's doing that thing again.
386
00:18:24,158 --> 00:18:26,126
These five users
are all the same person.
387
00:18:26,194 --> 00:18:27,761
Great. How do we find them?
388
00:18:27,861 --> 00:18:30,731
No idea. We've exhausted
every digital lead.
389
00:18:30,831 --> 00:18:33,401
Maybe we stop looking online.
390
00:18:34,302 --> 00:18:35,736
One of those usernames...
they mentioned
391
00:18:35,869 --> 00:18:37,405
a favorite coffee shop
in Glen Echo.
392
00:18:37,505 --> 00:18:39,307
Oh, I thought you said
they hated coffee shops?
393
00:18:39,407 --> 00:18:43,244
Corporate chains, so this one
must be local, mom-and-pop.
394
00:18:43,344 --> 00:18:46,013
Well, if we stake out that shop,
we can monitor their Wi-Fi
395
00:18:46,113 --> 00:18:47,481
for that same
encryption fingerprint.
396
00:18:47,581 --> 00:18:50,284
Our puppet master logs on,
and we grab him.
397
00:18:50,384 --> 00:18:52,520
We should loop in
the local chief of police.
398
00:18:52,586 --> 00:18:55,723
Keep media exposure minimal
and avoid a turf war.
399
00:18:56,857 --> 00:18:59,760
What? It's smart.
400
00:18:59,893 --> 00:19:01,094
Your dad would agree.
401
00:19:02,162 --> 00:19:03,631
Let's go fishing.
402
00:19:06,567 --> 00:19:09,237
Moonbeams and Coffee Beans?
403
00:19:09,337 --> 00:19:11,472
I can smell the patchouli
from here.
404
00:19:11,572 --> 00:19:14,508
It's definitely not a franchise.
405
00:19:14,575 --> 00:19:16,277
Anything?
406
00:19:17,378 --> 00:19:19,513
No hits on the Wi-Fi signal.
407
00:19:19,580 --> 00:19:22,049
I still got nothing.
408
00:19:24,252 --> 00:19:29,122
I haven't really, uh, checked in
since your dad's funeral.
409
00:19:29,957 --> 00:19:31,959
How are you?
410
00:19:32,092 --> 00:19:33,661
I miss him.
411
00:19:35,229 --> 00:19:37,731
The small things most of all.
412
00:19:37,798 --> 00:19:41,201
Going to dinner together,
movies.
413
00:19:41,302 --> 00:19:45,573
You know, we used to box once a
month, rain or shine.
414
00:19:45,673 --> 00:19:49,777
I haven't been back
to that gym since.
415
00:19:50,644 --> 00:19:52,212
Well, for what it's worth,
416
00:19:52,313 --> 00:19:54,982
I think he'd be proud
of what you built.
417
00:19:56,250 --> 00:19:58,719
I'm not so sure he was.
418
00:19:58,786 --> 00:20:00,754
So he knew about it?
419
00:20:04,392 --> 00:20:05,493
Yeah.
420
00:20:05,626 --> 00:20:08,929
My dad was NCIS, too.
Different office.
421
00:20:09,029 --> 00:20:11,231
Same shadow.
422
00:20:11,999 --> 00:20:15,135
Okay, your dad's shadow's
a lot bigger.
423
00:20:16,937 --> 00:20:20,040
There's always the question,
424
00:20:20,140 --> 00:20:22,810
are we honoring the legacy...
425
00:20:24,077 --> 00:20:26,514
...or trying to outrun it?
426
00:20:29,016 --> 00:20:32,853
That's him.
Our puppet master is inside.
427
00:20:33,521 --> 00:20:34,855
He's logging into Archive.
428
00:20:35,623 --> 00:20:38,392
On a laptop. You see anything?
429
00:20:38,992 --> 00:20:40,027
No way.
430
00:20:40,160 --> 00:20:42,696
You got to be kidding me.
431
00:20:44,164 --> 00:20:46,233
Wait, that's...
432
00:20:47,568 --> 00:20:48,769
Gabriel Laroche.
433
00:20:48,836 --> 00:20:51,539
The former NCIS deputy director.
434
00:20:52,373 --> 00:20:53,507
What's he doing here?
435
00:20:53,607 --> 00:20:56,344
I think we are
about to find out.
436
00:20:58,746 --> 00:21:00,147
Can we help you?
437
00:21:00,213 --> 00:21:02,850
You need to shut down
this operation immediately.
438
00:21:02,950 --> 00:21:06,219
Oh, we don't work
for you anymore.
439
00:21:07,020 --> 00:21:09,857
Well, Agent Knight,
440
00:21:09,957 --> 00:21:12,760
apparently
you didn't get the memo.
441
00:21:23,737 --> 00:21:25,473
You just burned our best lead.
442
00:21:25,539 --> 00:21:28,342
Because of your stunt, the man
that we were about to identify
443
00:21:28,442 --> 00:21:31,579
walked out of that coffee shop
and we never got eyes on him.
444
00:21:31,679 --> 00:21:33,447
You're welcome.
445
00:21:33,514 --> 00:21:34,848
What gives you that authority?
446
00:21:34,948 --> 00:21:37,050
I'm the new
U.S. associate attorney general.
447
00:21:37,184 --> 00:21:39,052
I can terminate
any investigative line
448
00:21:39,186 --> 00:21:40,654
I believe has been
legally compromised.
449
00:21:40,721 --> 00:21:42,022
Compromised how?
450
00:21:42,122 --> 00:21:44,958
Kayla Vance's private operation.
451
00:21:45,058 --> 00:21:48,362
Turns out, it's been funded
with criminal money.
452
00:21:49,196 --> 00:21:50,464
I'm assuming you have proof
453
00:21:50,564 --> 00:21:52,566
because that is
a serious accusation.
454
00:21:52,700 --> 00:21:54,034
It's a serious problem.
455
00:21:54,134 --> 00:21:56,203
Dirty money
contaminates the work.
456
00:21:56,303 --> 00:21:59,373
Now every case her group
touched is compromised,
457
00:21:59,473 --> 00:22:00,708
including yours.
458
00:22:00,808 --> 00:22:04,011
Any arrest that we make
based on her intel
459
00:22:04,111 --> 00:22:06,079
collapses in court.
460
00:22:06,179 --> 00:22:07,948
I spared you
a humiliating defeat.
461
00:22:08,048 --> 00:22:11,752
Financial reviews don't usually
require an associate A.G.
462
00:22:11,852 --> 00:22:15,689
to personally crash a stakeout.
463
00:22:17,324 --> 00:22:19,259
Unless there's something bigger.
464
00:22:19,359 --> 00:22:20,761
The money trail is real.
465
00:22:20,894 --> 00:22:22,696
- I intend to follow it wherever it leads.
- Uh-huh.
466
00:22:22,796 --> 00:22:26,033
And meanwhile, we let a network
of domestic terrorists walk?
467
00:22:26,133 --> 00:22:28,936
NCIS is free to continue
the bombing case
468
00:22:29,036 --> 00:22:31,672
without Kayla Vance.
469
00:22:31,772 --> 00:22:33,607
She and I need to talk.
470
00:22:33,707 --> 00:22:37,244
There are plenty of places
in this building to do that.
471
00:22:37,377 --> 00:22:38,679
You chose here?
472
00:22:38,746 --> 00:22:41,582
I'm sure you heard.
Latest interim director
473
00:22:41,682 --> 00:22:43,917
just accepted
an ambassador post overseas.
474
00:22:44,017 --> 00:22:46,954
This office just became vacant.
475
00:22:48,121 --> 00:22:49,322
Huh.
476
00:22:49,423 --> 00:22:50,691
You got to be kidding me.
477
00:22:50,758 --> 00:22:51,992
I thought we were done
with Laroche.
478
00:22:52,092 --> 00:22:54,061
Associate Attorney General
Laroche.
479
00:22:54,161 --> 00:22:56,697
I don't get it.
I vetted every grant,
480
00:22:56,764 --> 00:22:58,866
every donor, every transfer.
481
00:22:58,932 --> 00:23:00,701
I built that operation
carefully.
482
00:23:00,768 --> 00:23:02,069
We believe you.
483
00:23:02,135 --> 00:23:04,037
So where did dirty money
suddenly come from?
484
00:23:04,137 --> 00:23:05,906
We need to rebuild
any of the evidence
485
00:23:06,006 --> 00:23:07,608
provided to us by Kayla's group.
486
00:23:07,708 --> 00:23:09,109
Yeah, before whoever's
behind these bombings
487
00:23:09,209 --> 00:23:10,878
strikes again.
488
00:23:11,945 --> 00:23:13,547
We might be too late.
489
00:23:13,647 --> 00:23:16,116
Archive's been quiet since we
got back from the coffee shop.
490
00:23:16,249 --> 00:23:18,852
Quiet? Like before
the alley bomb?
491
00:23:18,952 --> 00:23:20,621
Something's coming.
492
00:23:20,688 --> 00:23:22,490
And you've been sidelined.
493
00:23:24,091 --> 00:23:27,495
More like summoned.
Laroche wants me upstairs.
494
00:23:28,328 --> 00:23:30,430
You go deal with that.
We'll handle the rest.
495
00:23:33,801 --> 00:23:36,504
- Damn it.
- What?
496
00:23:36,604 --> 00:23:40,808
Mateo. I missed his entire tour.
He's on his way out.
497
00:23:43,010 --> 00:23:46,146
I'm-I'm so sorry
about this, okay?
498
00:23:46,213 --> 00:23:48,181
This is not exactly
the day I had in mind.
499
00:23:48,281 --> 00:23:50,518
Yeah, me neither, but, hey,
500
00:23:50,651 --> 00:23:52,152
I got to see
a real investigation,
501
00:23:52,252 --> 00:23:54,688
I got to, uh,
go to the Cyber basement,
502
00:23:54,788 --> 00:23:57,791
and I saw two fights
outside of HR, so...
503
00:23:57,891 --> 00:24:02,329
Well, I was hoping
for something more convincing.
504
00:24:02,429 --> 00:24:06,734
Right. About that, uh...
505
00:24:08,068 --> 00:24:12,439
I think there's something
that I got to tell you.
506
00:24:14,141 --> 00:24:15,275
Oh.
507
00:24:16,910 --> 00:24:18,411
Hey.
508
00:24:18,512 --> 00:24:19,813
You don't got to say anything.
509
00:24:19,913 --> 00:24:22,683
- I... I don't?
- No.
510
00:24:22,783 --> 00:24:25,953
Look, I, I know that
I've been excited about you
511
00:24:26,053 --> 00:24:27,721
applying for this internship
and everything,
512
00:24:27,821 --> 00:24:30,123
but I, you know,
I don't want you doing something
513
00:24:30,223 --> 00:24:31,925
just because you think
it's gonna make me happy.
514
00:24:32,025 --> 00:24:35,729
You got to figure out
what works best for you.
515
00:24:36,997 --> 00:24:39,032
Right.
516
00:24:39,132 --> 00:24:42,469
I-I don't think NCIS is for me.
517
00:24:43,671 --> 00:24:44,738
Well, that's okay.
518
00:24:44,838 --> 00:24:46,139
You know?
519
00:24:47,908 --> 00:24:49,209
Nick, hey, you need me, or...?
520
00:24:49,276 --> 00:24:50,844
Just that Kasie found something
521
00:24:50,911 --> 00:24:54,782
on the bomb schematics,
but, uh, it can wait.
522
00:24:54,915 --> 00:24:57,417
Thanks. Come on.
523
00:25:00,854 --> 00:25:03,356
I found these plans sitting
in an open thread
524
00:25:03,423 --> 00:25:06,126
on Archive,
and they're not just blueprints.
525
00:25:06,226 --> 00:25:09,162
It's a step-by-step guide
to building a pipe bomb.
526
00:25:09,262 --> 00:25:11,131
I'm tracing everyone
who downloaded the file.
527
00:25:11,264 --> 00:25:14,501
Him questioning her
in that office.
528
00:25:14,602 --> 00:25:15,936
If Laroche is pulling stunts,
529
00:25:16,036 --> 00:25:17,605
that means the case
against Kayla's thin.
530
00:25:17,705 --> 00:25:20,240
Maybe, but
the dirty money is real.
531
00:25:20,307 --> 00:25:22,643
Kayla's grant funding
didn't all come
532
00:25:22,743 --> 00:25:24,377
from private foundations.
Some of it
533
00:25:24,444 --> 00:25:25,646
was routed through a slush fund.
534
00:25:25,779 --> 00:25:28,281
Not so much "dirty" money
as "opaque."
535
00:25:28,381 --> 00:25:29,983
"Dirty" plays better
in a headline.
536
00:25:30,117 --> 00:25:31,885
And on Laroche's résumé.
537
00:25:31,952 --> 00:25:34,254
If he can prove Kayla
knowingly took tainted funds,
538
00:25:34,321 --> 00:25:35,723
and right now,
that's what it looks like.
539
00:25:35,789 --> 00:25:38,391
Her name's the only one on all
540
00:25:38,491 --> 00:25:40,661
- the filings and applications.
- You believe that?
541
00:25:40,794 --> 00:25:42,029
No, not for a second,
542
00:25:42,129 --> 00:25:44,164
but if this goes public,
belief won't matter.
543
00:25:44,297 --> 00:25:46,333
Oh, Laroche is ambitious,
not reckless.
544
00:25:46,433 --> 00:25:49,069
He wouldn't move without more.
545
00:25:49,169 --> 00:25:50,470
There's more.
546
00:25:50,570 --> 00:25:52,539
Access logs just came back
on the slush fund.
547
00:25:52,640 --> 00:25:55,308
According to this, the last time
548
00:25:55,408 --> 00:25:58,011
anyone looked at the dirty money
account was two months ago.
549
00:25:58,111 --> 00:26:00,047
Tell me it wasn't Kayla.
550
00:26:01,915 --> 00:26:03,183
Uh...
551
00:26:03,283 --> 00:26:06,687
I don't think Laroche
is going after Kayla.
552
00:26:07,855 --> 00:26:11,992
The last person to access that
dirty account was your father.
553
00:26:12,125 --> 00:26:13,526
Two days before his death.
554
00:26:13,661 --> 00:26:15,996
Credentialed login.
Two-factor authentication.
555
00:26:17,030 --> 00:26:18,165
No.
556
00:26:19,066 --> 00:26:20,000
Record is clear.
557
00:26:20,100 --> 00:26:21,835
My father would never knowingly
558
00:26:21,935 --> 00:26:23,303
touch dirty money.
559
00:26:23,403 --> 00:26:26,306
Perhaps he believed
the ends justified the means.
560
00:26:26,406 --> 00:26:29,142
You don't get to rewrite
his legacy based on guesses.
561
00:26:29,209 --> 00:26:31,444
Not rewriting or guessing.
562
00:26:31,511 --> 00:26:33,380
I'm following the evidence.
563
00:26:33,513 --> 00:26:36,650
A powerful man, a father, used
564
00:26:36,750 --> 00:26:40,854
untraceable funds
to help his little girl.
565
00:26:40,954 --> 00:26:42,790
It's not hard to imagine.
566
00:26:43,623 --> 00:26:45,893
You're wrong.
There's another explanation.
567
00:26:46,026 --> 00:26:47,360
Then let's hear it. Otherwise,
568
00:26:47,494 --> 00:26:50,063
I have to assume
you were involved.
569
00:26:52,165 --> 00:26:53,967
This interrogation is over.
570
00:26:54,067 --> 00:26:56,236
Agent Vance and I were
simply talking.
571
00:26:56,369 --> 00:26:58,839
Well, from now on,
you can talk to her lawyer.
572
00:27:02,009 --> 00:27:06,246
I think I already have
what I need.
573
00:27:22,395 --> 00:27:25,198
Pretty sure "sidelined"
doesn't mean overtime.
574
00:27:25,298 --> 00:27:28,435
I'm not working the case.
I'm reviewing my mistakes.
575
00:27:28,535 --> 00:27:30,437
The coffee shop. The alley.
576
00:27:30,537 --> 00:27:32,405
I missed something.
577
00:27:32,505 --> 00:27:35,242
Just like I missed
the dirty money.
578
00:27:35,342 --> 00:27:37,644
You did not build a slush fund.
579
00:27:37,745 --> 00:27:41,248
Apparently, I built something
that used one.
580
00:27:42,315 --> 00:27:43,683
And my dad knew.
581
00:27:43,784 --> 00:27:46,286
Nobody believes that your
dad was moving dirty cash.
582
00:27:46,386 --> 00:27:49,923
Belief doesn't matter.
Proof does.
583
00:27:53,526 --> 00:27:55,595
My dad warned me.
584
00:27:55,695 --> 00:27:58,732
The last time we talked,
we argued.
585
00:27:59,466 --> 00:28:02,135
He tried to warn me
about living in two worlds.
586
00:28:02,235 --> 00:28:04,637
Things can get missed.
587
00:28:05,438 --> 00:28:08,008
Which is why I was gonna leave.
588
00:28:09,209 --> 00:28:11,779
I was gonna quit NCIS.
589
00:28:12,612 --> 00:28:13,914
I took his warning to heart.
590
00:28:13,981 --> 00:28:15,983
I was going all-in
on my new initiative,
591
00:28:16,116 --> 00:28:18,085
but before I could tell him...
592
00:28:20,220 --> 00:28:22,122
...he was gone.
593
00:28:22,222 --> 00:28:26,626
After that, leaving NCIS
felt like betrayal.
594
00:28:27,795 --> 00:28:29,997
Like I was walking out
on him twice.
595
00:28:30,130 --> 00:28:32,465
You think he'd see it that way?
596
00:28:32,565 --> 00:28:34,467
I don't know.
597
00:28:34,567 --> 00:28:36,436
And now, I never will.
598
00:28:44,311 --> 00:28:45,478
What's this?
599
00:28:45,612 --> 00:28:48,448
Uh, that's from
the alley bomber's car.
600
00:28:48,515 --> 00:28:50,918
It's a cheap Star Wars knockoff.
601
00:28:51,018 --> 00:28:52,685
No.
602
00:28:52,786 --> 00:28:54,587
I've seen this before.
603
00:29:01,094 --> 00:29:03,196
The coffee shop bomber,
Danny Hammersmith,
604
00:29:03,330 --> 00:29:04,664
he was reading this same book.
605
00:29:04,764 --> 00:29:06,099
- Kayla...
- We have to go back
606
00:29:06,199 --> 00:29:07,901
through Archive.
There might be a connection.
607
00:29:08,001 --> 00:29:09,436
Kayla, you cannot
work this case.
608
00:29:09,502 --> 00:29:12,105
If Laroche finds out,
that is your badge.
609
00:29:12,205 --> 00:29:14,674
Do not hand him that win.
610
00:29:27,154 --> 00:29:29,022
Where's Parker?
611
00:29:29,122 --> 00:29:30,657
Why? What happened?
612
00:29:30,723 --> 00:29:33,827
I traced the bomb schematics.
The last person to download them
613
00:29:33,894 --> 00:29:36,129
didn't bother to mask
their IP address.
614
00:29:36,229 --> 00:29:37,664
Hank Hammersmith.
615
00:29:38,698 --> 00:29:42,202
- The grieving father?
- Of last year's coffee shop bomber.
616
00:29:42,335 --> 00:29:46,273
It looks like he's picking up
where his son left off.
617
00:29:55,148 --> 00:29:56,649
Hank's cell phone is still off.
618
00:29:56,749 --> 00:29:59,452
Agents swept his home
and found bomb parts.
619
00:29:59,519 --> 00:30:03,490
Grieving father builds a bomb
and disappears. He has a target.
620
00:30:03,590 --> 00:30:05,192
Wait, so he's part of
the bombing network?
621
00:30:05,292 --> 00:30:07,961
- Or a father out for revenge.
- Against who?
622
00:30:08,061 --> 00:30:09,863
People who radicalized his son.
623
00:30:09,963 --> 00:30:12,532
Been running language analysis
on Archive posts.
624
00:30:12,632 --> 00:30:13,733
Take a look at this.
625
00:30:14,968 --> 00:30:16,970
Those are the posts
we got from Kayla.
626
00:30:17,037 --> 00:30:19,572
We're not supposed
to use that intel.
627
00:30:19,672 --> 00:30:22,009
Oh, I know, but the same phrases
keep repeating.
628
00:30:22,142 --> 00:30:24,878
Right? "Violence is
the language of power."
629
00:30:25,012 --> 00:30:27,380
"Martyrs are the seeds
of tomorrow."
630
00:30:27,514 --> 00:30:30,050
These are all lines quoted
from the same source.
631
00:30:30,150 --> 00:30:31,818
Agnors Bliss.
632
00:30:31,919 --> 00:30:34,321
Yeah, book is about
the "Jondafarian Resistance"
633
00:30:34,421 --> 00:30:36,556
violently rising up
against "The Cric."
634
00:30:36,689 --> 00:30:40,660
Alien overlords who enslave
citizens with debt crystals.
635
00:30:40,760 --> 00:30:42,329
So space capitalism?
636
00:30:42,429 --> 00:30:46,399
Exactly. And "Agnors Bliss" is
the book's version of heaven.
637
00:30:46,499 --> 00:30:47,834
Reserved for martyrs
who fight back.
638
00:30:47,901 --> 00:30:49,869
Bombers think
they're dying for a cause.
639
00:30:50,003 --> 00:30:53,806
But how did they go
from space opera to pipe bombs?
640
00:30:53,873 --> 00:30:54,908
Grooming.
641
00:30:55,042 --> 00:30:55,976
Take a look at this photo
642
00:30:56,043 --> 00:30:57,477
just posted online by a fan.
643
00:30:57,544 --> 00:30:59,179
That's the author, Isaac Wren.
644
00:30:59,279 --> 00:31:01,514
And he's outside of
the mom-and-pop coffee shop.
645
00:31:01,581 --> 00:31:04,217
Well, timestamp matches
our stakeout from yesterday.
646
00:31:04,351 --> 00:31:06,719
It was him.
The author's our puppet master.
647
00:31:06,819 --> 00:31:08,521
- We need to bring him in.
- Knight's right, though.
648
00:31:08,588 --> 00:31:11,024
This all traces back to Kayla.
We can't use this for an arrest.
649
00:31:11,091 --> 00:31:13,860
Yeah, but we can use it to stop
a bomb. Hank saw this book,
650
00:31:13,961 --> 00:31:16,529
and if he figured out
that Wren is behind this...
651
00:31:16,629 --> 00:31:18,131
The author's the target.
652
00:31:18,798 --> 00:31:20,400
Okay, Isaac Wren
653
00:31:20,500 --> 00:31:23,103
is speaking at a sci-fi
convention downtown right now.
654
00:31:23,203 --> 00:31:24,571
All right,
alert convention security.
655
00:31:24,671 --> 00:31:27,640
Have them conduct
a fire evacuation.
656
00:31:29,109 --> 00:31:31,144
Attention. A fire alarm has been activated.
657
00:31:31,244 --> 00:31:34,347
Please proceed calmly
to the nearest exit.
658
00:31:36,216 --> 00:31:37,750
Torres, McGee, south corridor.
659
00:31:37,850 --> 00:31:39,186
Knight, with me.
660
00:31:40,887 --> 00:31:43,090
Does this mean the Hall H panel
has been cancelled?
661
00:31:43,223 --> 00:31:44,357
It moved. Outside.
662
00:31:44,457 --> 00:31:47,394
NCIS. Isaac Wren, where is he?
663
00:31:47,494 --> 00:31:49,896
He was on the main stage.
He's being escorted out.
664
00:31:49,997 --> 00:31:52,365
- Escorted by who?
- One of your agents.
665
00:31:52,465 --> 00:31:54,601
She said it was
a security precaution.
666
00:31:54,701 --> 00:31:55,835
Kayla.
667
00:31:57,204 --> 00:32:00,373
Two bombers died
with your book in their hands.
668
00:32:00,473 --> 00:32:01,741
I don't know
what you're talking about.
669
00:32:01,841 --> 00:32:04,144
I write fiction, and that is it,
670
00:32:04,244 --> 00:32:06,379
and right now, I'm just trying
to get to my car.
671
00:32:06,479 --> 00:32:08,548
You need to come
with me to NCIS.
672
00:32:08,648 --> 00:32:11,351
I'm done talking now.
673
00:32:14,821 --> 00:32:16,289
You're not just
inspiring these attacks,
674
00:32:16,389 --> 00:32:18,591
you're directing them.
Aren't you?
675
00:32:19,926 --> 00:32:23,830
What is that?
Uh, driver, that's not mine.
676
00:32:23,963 --> 00:32:25,832
I think it is.
677
00:32:25,965 --> 00:32:29,002
- Mr. Hammersmith?
- He's not my driver.
678
00:32:33,440 --> 00:32:35,442
- Keep moving.
- There. She's in the SUV.
679
00:32:35,508 --> 00:32:38,011
- Yeah, with our bomber.
- Wait.
680
00:32:38,111 --> 00:32:40,047
If we move in,
we could spook this guy.
681
00:32:40,147 --> 00:32:41,681
And we don't know the play.
682
00:32:41,781 --> 00:32:43,916
All right, then let's find out.
683
00:32:43,983 --> 00:32:46,586
Touch that door again,
684
00:32:46,653 --> 00:32:49,889
and you can die right here.
685
00:32:56,663 --> 00:32:59,132
Mr. Hammersmith, please put down
686
00:32:59,199 --> 00:33:00,867
that detonator
that's in your hand.
687
00:33:03,636 --> 00:33:05,338
He killed my son.
688
00:33:05,438 --> 00:33:08,908
He filled his head with poison.
689
00:33:11,544 --> 00:33:13,446
I got a clear shot
on the driver.
690
00:33:13,513 --> 00:33:14,547
Negative. You shoot,
691
00:33:14,647 --> 00:33:16,349
and that detonator goes off.
692
00:33:17,250 --> 00:33:19,386
Hank, please.
693
00:33:20,420 --> 00:33:21,588
Let us help you.
694
00:33:21,688 --> 00:33:23,490
Help?
695
00:33:24,891 --> 00:33:26,326
Nobody helped my son.
696
00:33:26,426 --> 00:33:28,328
I didn't even help my son.
697
00:33:28,428 --> 00:33:30,197
It's Kasie.
698
00:33:30,297 --> 00:33:32,399
Oh, you got to see this.
699
00:33:32,499 --> 00:33:35,001
The FBI pretended to care,
and then moved on.
700
00:33:35,068 --> 00:33:38,538
Danny was just a...
another statistic.
701
00:33:38,638 --> 00:33:40,407
He wasn't to me.
702
00:33:40,540 --> 00:33:42,542
Your son changed my life.
703
00:33:43,476 --> 00:33:46,113
The coffee shop attack is
the reason why I built a team
704
00:33:46,213 --> 00:33:49,649
to find kids like Danny before
people like Wren get to them.
705
00:33:51,118 --> 00:33:52,819
What are you doing?
706
00:33:52,919 --> 00:33:54,187
Who are you talking to?
707
00:33:54,254 --> 00:33:55,855
People who can get justice
for your son.
708
00:33:55,922 --> 00:33:57,090
You're lying.
709
00:33:57,224 --> 00:33:59,559
NCIS just pulled
Isaac Wren's financials.
710
00:33:59,659 --> 00:34:02,662
He shorted stocks
before both bombings.
711
00:34:02,762 --> 00:34:06,199
He set the attacks in motion
and then cashed in.
712
00:34:06,299 --> 00:34:08,168
And we have the proof.
713
00:34:12,839 --> 00:34:15,108
You used my boy...
714
00:34:16,643 --> 00:34:17,944
- ...for money?
- No.
715
00:34:18,044 --> 00:34:19,812
No. No.
716
00:34:22,549 --> 00:34:23,850
Hank.
717
00:34:24,751 --> 00:34:26,253
Please listen to me.
718
00:34:26,353 --> 00:34:28,855
He's going to prison
for the rest of his life,
719
00:34:28,955 --> 00:34:31,524
which means you can live
the rest of yours.
720
00:34:32,925 --> 00:34:35,662
For your son.
721
00:34:38,865 --> 00:34:41,134
I-I miss him so much.
722
00:34:43,603 --> 00:34:45,638
I know what that feels like.
723
00:34:48,475 --> 00:34:50,377
But we have to move on.
724
00:34:51,611 --> 00:34:53,313
For them.
725
00:35:06,559 --> 00:35:08,127
Detonator secure.
726
00:35:13,433 --> 00:35:15,168
Uh-uh. Hands up.
727
00:35:15,835 --> 00:35:17,069
Hey. Look, I didn't do a thing.
728
00:35:17,136 --> 00:35:18,338
The guy was trying to kill me.
729
00:35:18,471 --> 00:35:20,039
- Spin around. Hands.
- Whoa.
730
00:35:33,353 --> 00:35:35,288
Agent Parker.
731
00:35:36,088 --> 00:35:37,724
You're early.
732
00:35:37,824 --> 00:35:39,859
Isaac Wren pled no contest.
733
00:35:39,992 --> 00:35:42,462
Securities fraud
and domestic terrorism.
734
00:35:42,529 --> 00:35:43,996
Turns out, he was broke,
735
00:35:44,130 --> 00:35:47,400
but instead of waiting
for book royalties, he
736
00:35:47,500 --> 00:35:49,536
radicalized and then monetized
737
00:35:49,636 --> 00:35:51,304
his most passionate followers.
738
00:35:51,404 --> 00:35:55,074
Lucky for us, he didn't go
into politics.
739
00:35:57,510 --> 00:35:59,279
I trust the case will stick?
740
00:35:59,346 --> 00:36:01,414
We rebuilt everything
from the ground up.
741
00:36:01,514 --> 00:36:04,116
- Nothing tied to Kayla.
- Good work.
742
00:36:04,183 --> 00:36:05,518
Tell that to Kayla.
743
00:36:05,618 --> 00:36:08,388
- She disobeyed orders.
- She stopped a bomb.
744
00:36:08,488 --> 00:36:10,457
Firing her won't play well.
745
00:36:10,557 --> 00:36:12,692
She's not being fired.
746
00:36:12,792 --> 00:36:14,827
For that or anything else.
747
00:36:15,562 --> 00:36:17,497
There's no concrete evidence
that she knew those funds
748
00:36:17,597 --> 00:36:19,232
flowing into her account
were tainted,
749
00:36:19,332 --> 00:36:21,734
or that she knew her father
was the one who moved them.
750
00:36:21,834 --> 00:36:23,202
He didn't.
751
00:36:23,303 --> 00:36:25,905
There's no evidence that Vance
ever touched that money.
752
00:36:26,038 --> 00:36:29,409
So the fact it's connected
to his daughter is...
753
00:36:29,509 --> 00:36:30,710
just a coincidence?
754
00:36:30,810 --> 00:36:32,645
I think he was
looking out for her.
755
00:36:32,712 --> 00:36:36,082
Found the dirty money and died
before he could warn her.
756
00:36:36,215 --> 00:36:37,784
Interesting theory.
757
00:36:37,884 --> 00:36:40,387
Yeah, more plausible than yours.
758
00:36:42,489 --> 00:36:43,890
I agree.
759
00:36:43,990 --> 00:36:46,493
Which is why I'm dropping
my investigation.
760
00:36:47,394 --> 00:36:48,928
I thought you'd be pleased.
761
00:36:49,061 --> 00:36:51,197
You came in here guns blazing,
762
00:36:51,264 --> 00:36:53,700
making accusations,
threatening careers.
763
00:36:53,800 --> 00:36:54,934
Now, you just walk away?
764
00:36:55,067 --> 00:36:56,769
Hmm, like you said,
765
00:36:56,869 --> 00:36:58,905
there's no evidence
that Vance moved that money.
766
00:36:59,038 --> 00:37:00,707
Then who did?
767
00:37:00,807 --> 00:37:02,442
That's for someone else
to find out.
768
00:37:02,575 --> 00:37:06,679
Right now, my job is to restore
confidence in this agency.
769
00:37:06,746 --> 00:37:09,081
I didn't know that was a problem.
770
00:37:09,181 --> 00:37:10,683
Well, it will be
tomorrow morning,
771
00:37:10,783 --> 00:37:12,819
when news of Vance's connection
to that slush fund
772
00:37:12,919 --> 00:37:14,454
hits the media cycle. Whew.
773
00:37:14,554 --> 00:37:17,657
Thankfully,
I'll be there to step in,
774
00:37:17,757 --> 00:37:20,627
publicly clear his name,
protect his legacy,
775
00:37:20,760 --> 00:37:23,563
and safeguard this institution.
776
00:37:23,663 --> 00:37:24,564
Mm.
777
00:37:24,664 --> 00:37:26,132
You came to play the hero. Why?
778
00:37:26,265 --> 00:37:28,034
What do you get
out of all of this?
779
00:37:36,776 --> 00:37:39,912
But everything is a game
to you. Political chess.
780
00:37:40,012 --> 00:37:41,748
Then you know the rules.
781
00:37:42,615 --> 00:37:44,817
Start turning over pieces...
782
00:37:45,852 --> 00:37:47,219
...we both lose.
783
00:37:47,320 --> 00:37:49,789
Me? I got nothing to hide.
784
00:37:50,657 --> 00:37:53,025
Why do I find that
hard to believe?
785
00:38:03,470 --> 00:38:05,405
I figured this was
neutral ground.
786
00:38:05,472 --> 00:38:08,207
For what? Laroche backed off.
787
00:38:08,307 --> 00:38:10,410
I don't have
to sneak around NCIS.
788
00:38:10,510 --> 00:38:12,311
No.
789
00:38:12,412 --> 00:38:14,814
But you still have
a big decision to make.
790
00:38:15,682 --> 00:38:18,485
My organization.
791
00:38:18,618 --> 00:38:21,821
The funding's tainted.
The reputation's shot.
792
00:38:22,589 --> 00:38:24,156
It needs rebuilding
from scratch.
793
00:38:24,256 --> 00:38:27,259
Sounds like a full-time job.
794
00:38:27,326 --> 00:38:29,862
A job I'd love.
795
00:38:33,099 --> 00:38:35,334
But not one I'm sure I can take.
796
00:38:35,435 --> 00:38:37,837
Well, while you decide...
797
00:38:37,937 --> 00:38:39,839
you said that you miss
your monthly boxing sessions
798
00:38:39,972 --> 00:38:41,140
with your dad.
799
00:38:41,240 --> 00:38:43,976
Looking for a new, uh,
sparring partner?
800
00:38:44,076 --> 00:38:45,645
You serious?
801
00:38:45,712 --> 00:38:48,314
Well, I mean, I'm no Leon Vance,
but I got my gear in the car.
802
00:38:48,381 --> 00:38:51,684
Well, before you grab it, let me
make sure mine's still here.
803
00:38:51,784 --> 00:38:54,421
Like I said,
I haven't been back in months.
804
00:39:01,594 --> 00:39:03,262
Oh, my God.
805
00:39:04,096 --> 00:39:05,264
Everything okay?
806
00:39:06,232 --> 00:39:08,267
That's his handwriting.
807
00:39:12,138 --> 00:39:13,773
It's from my dad.
808
00:39:15,374 --> 00:39:18,645
He must've left it here
after our last session.
809
00:39:26,385 --> 00:39:29,856
It's an NCIS discharge form
810
00:39:29,956 --> 00:39:31,724
with my name on it.
811
00:39:32,559 --> 00:39:34,360
He filled it out and signed it.
812
00:39:39,699 --> 00:39:42,234
Dated just before he died.
813
00:39:52,044 --> 00:39:54,146
He wasn't choosing for me.
814
00:39:58,918 --> 00:40:01,420
He was making room
for you to choose.
815
00:40:17,036 --> 00:40:18,270
What up, Jimmy?
816
00:40:18,404 --> 00:40:20,272
You're adding something
to the wall of fame?
817
00:40:20,372 --> 00:40:21,874
Yeah, like father,
like daughter.
818
00:40:21,974 --> 00:40:24,376
Yeah, who knows, maybe Mateo
will be up here soon.
819
00:40:24,477 --> 00:40:27,880
Well, after his visit,
he didn't seem too convinced.
820
00:40:27,947 --> 00:40:30,449
Yeah, that's what I thought,
but then, Curtis called me.
821
00:40:30,550 --> 00:40:32,418
He said that,
right after I left,
822
00:40:32,485 --> 00:40:34,086
that Mateo asked to use
a workstation
823
00:40:34,186 --> 00:40:36,388
to fill out
an internship application.
824
00:40:36,489 --> 00:40:37,990
Hmm.
825
00:40:39,258 --> 00:40:40,827
That's not what he said
to his dad.
826
00:40:40,960 --> 00:40:43,295
Maybe he wants
to keep it a surprise.
827
00:40:44,096 --> 00:40:47,299
Or, maybe, like Kayla,
828
00:40:47,399 --> 00:40:49,802
he just wants to earn it
on his own.
829
00:40:51,170 --> 00:40:53,740
- Have a good night, Nick.
- Don't tell me what to do.
830
00:40:53,806 --> 00:40:55,141
Okay.
831
00:41:22,935 --> 00:41:24,671
Hey. Mateo.
832
00:41:26,005 --> 00:41:27,373
Wait up.
833
00:41:28,507 --> 00:41:31,343
Agent Torres?
What are you doing here?
834
00:41:31,477 --> 00:41:33,145
We need to talk.
835
00:41:33,245 --> 00:41:34,681
About what?
836
00:41:34,814 --> 00:41:38,217
About your
internship application.
837
00:41:39,719 --> 00:41:41,320
Why?
838
00:41:41,420 --> 00:41:43,355
Like I told my dad,
839
00:41:43,455 --> 00:41:45,725
NCIS isn't for me.
840
00:41:45,825 --> 00:41:48,427
Yeah, well, that's not
what you told Curtis.
841
00:41:48,527 --> 00:41:52,732
Well, I started an application,
and then, I...
842
00:41:52,832 --> 00:41:54,466
changed my mind. Can I go now?
843
00:41:54,567 --> 00:41:56,703
What were you doing
at that workstation?
844
00:41:56,803 --> 00:41:58,370
Nothing.
845
00:41:58,470 --> 00:42:00,106
Drop it.
846
00:42:01,774 --> 00:42:03,142
Why are you lying to me?
847
00:42:03,242 --> 00:42:06,145
I said drop it.
848
00:42:09,716 --> 00:42:11,951
Mateo, keep your hands
where I can see them.
849
00:42:14,386 --> 00:42:17,690
Turn around and walk away.
They...
850
00:42:18,524 --> 00:42:19,926
...they could be watching.
851
00:42:20,026 --> 00:42:21,628
Who could be watching?
852
00:42:22,461 --> 00:42:24,230
Don't make me do this.
853
00:42:24,330 --> 00:42:26,899
Mateo, don't.
854
00:42:31,470 --> 00:42:33,973
Don't do it.
855
00:42:41,180 --> 00:42:43,883
Captioning sponsored by CBS
856
00:42:43,950 --> 00:42:46,252
and TOYOTA.
857
00:42:46,352 --> 00:42:48,788
Captioned by
Media Access Group at WGBH
access.wgbh.org