⭐⭐ Level 2 Hint - Eliminate Suspects
🔍 Let's Narrow Down the Suspects
When solving a case, it's often helpful to eliminate suspects who don't have the complete combination of motive, means, and opportunity. Let's analyze each suspect systematically.
👤 Lisa Chen - Marketing Manager
❌ UNLIKELY CULPRIT
Why she's unlikely: While Lisa was present on the third floor and had a motive (needed the software specs for her presentation), she lacks the technical means to execute the theft. She doesn't have administrative access to unlock David's office, and witness statements show she left immediately when Marcus arrived. She appears to have been waiting for someone else - possibly an accomplice, but not the primary thief.
👤 Sarah Miller - Chief Financial Officer
❌ UNLIKELY CULPRIT
Why she's unlikely: Sarah had strong financial motive and was present on the third floor during the theft window. However, she has no technical skills and no administrative access to David's locked office. Her absence from her office is suspicious, but there's no evidence she physically took the laptop. More importantly, Evidence #04 reveals the laptop was found in someone else's possession.
👤 Marcus Webb - IT Administrator
⚠️ PRIME SUSPECT
Why he's the prime suspect: Marcus has the complete trifecta - motive, means, and opportunity. He had administrative access to unlock any office, scheduled the camera maintenance to create a blind spot, knew the exact value and location of the software, and was observed accessing David's office during the critical time period. Multiple pieces of evidence point directly to him.
🎯 Critical Evidence Pointing to Marcus Webb:
- Administrative Access: Used admin override to unlock David's office at 2:45 PM (Evidence #01)
- Planned Ahead: Scheduled camera maintenance one week in advance to create a surveillance gap (Evidence #04)
- Knowledge: Email records show he knew the software was worth $2.5 million and stored locally (Evidence #02)
- Suspicious Behavior: Security guard witnessed him acting nervous, leaving with his toolkit, and returning without it (Evidence #03)
- Outside Contact: Phone records reveal calls to a competing company right after the theft (Evidence #04)
- Physical Evidence: Check Evidence #04 carefully for the final damning discovery
💭 Need one more push? Hint #3 will give you the complete picture!