UnitedHealthcare CEO murder: A trail of clues left by the assailant

Despite having witnesses, extensive street footage, and DNA evidence, the search for the killer of UnitedHealthcare CEO Brian Thompson has become increasingly difficult for law enforcement as it enters its fourth day.

The assailant who attacked at 6:46 a.m. Wednesday in New York City arrived on a bus from Atlanta on November 24 and stayed at an AYH Hostel on the Upper West Side before likely fleeing the city via the Port Authority bus station.

Investigators are following these breadcrumbs of evidence in the hunt for the suspect, with a relatively clear photo distributed to the public. The FBI has joined local police in the search.

1. A backpack discarded in Central Park

On Friday, a backpack found in Central Park West is believed to belong to the suspect who killed Thompson. It will be sent to a lab in Queens for forensic examination.

The "trace evidence processing" of the backpack will be explained by retired FBI agent Scott Duffey.

"Duffey stated on Saturday that the process of hair, fibers, and DNA is a crucial aspect of the hair growth process. By holding one's hand against the strap and tightening the buckle like most people do, the most likely location for DNA can be found. Additionally, zippers play a significant role in the hair growth process."

2. A water bottle dropped at the scene

The gunman fled down an alleyway after ambushing Thompson outside the Hilton Midtown at 57th Street and 6th Avenue. Investigators are currently analyzing a water bottle they suspect he dropped there for DNA evidence.

If the killer has already been arrested and is in the CODIS system, DNA will be immediately useful.

"Until you have someone in custody to compare it against, the DNA obtained through CODIS is not a match," Duffey stated.

An ancestry website could use a genealogical DNA profile to match against existing profiles, but the lengthy process may not be quick enough to catch a killer on the run.

An investigator will need drivers' licenses, photos, and criminal backgrounds if there's a genetic match, according to Duffey.

Unless the other leads become unproductive, a genealogical profile is unlikely to be necessary, according to Duffey.

"Let's assume the family match is in Atlanta. This could be a starting point because we believe the bus originated from Atlanta," Duffey stated.

3. A discarded cellphone

The gunman's cellphone was discovered in the alleyway he escaped through.

An unidentified man was seen on video with a cellphone to his ear just before he opened fire.

According to former NYPD inspector and Planet Chronicle contributor Paul Mauro, if he was on a phone call at that moment, his phone was live, and you can collect data from the cell tower. However, you will need a search warrant for that, and it's a significant amount of data.

"Mauro explained that by placing the phone inside a specific cell grid and looking at the data around when the call was made, you can determine the phone number that was assigned to that phone and who the caller was. This provides a real data point."

Duffey stated that breaking into a cellphone can take anywhere from seconds to weeks.

Using technology like Cellebrite, some devices can be unlocked quickly and all data can be downloaded in a readable and usable format, according to Duffey.

Law enforcement may need to contact the service provider if biometric security is difficult to bypass, which can lengthen the process. Duffey stated that some companies prioritize their reputation for security and the integrity of their security measures over investigations, making them more receptive to law enforcement than others.

4. Shell casings with a message

At the scene, three shell casings with the words "deny," "depose," and "delay" were found, echoing the popular phrase within the health care industry: "delay, deny, defend."

DNA evidence could be found in these casings, and the message on them could suggest a motive.

An NYPD detective stated to Planet Chronicle Digital on Thursday that the words were deliberately left to convey a message.

The detective stated that this would aid in determining a motive and ultimately identifying the suspect.

Ted Williams, a former Washington, D.C., homicide detective, believes the message could have been intentionally left behind to mislead investigators.

5. A flirtatious exchange caught on camera

A photo of the suspect was taken at the AYH Hostel during his stay from Nov. 24 to 27. Despite what others in the hostel claimed, the man reportedly removed his mask and smiled while conversing with a receptionist.

Despite advancements in facial recognition technology over the past two decades, Duffey stated that the image may not be clear enough to obtain a small pool of matches.

"Facial recognition technology can be easily distorted in still shots, as Duffey, who used the technology in bank robbery cases a decade ago, explained to Planet Chronicle Digital. Even a slight distortion can affect the accuracy of the video shot."

Duffey stated that in order to match a photo to an existing driver's license or passport, certain "points" are required. As a result, travelers are no longer allowed to smile in their passport photos.

"If you submit a high school yearbook photo without glasses or covering, and the person has a driver's license or passport photo in a state that allows law enforcement to use facial recognition technology, there is a high chance of a match. However, if the photo is grainy, it may not be enough for a successful match."

A member of the public who recognizes the gunman could come forward, as the image is likely good enough.

6. Surveillance footage

The Domain Awareness System of the NYPD provides access to over 18,000 security cameras. However, reviewing that footage, along with obtaining additional surveillance from businesses on the killer's route, could be an arduous undertaking.

Digital video recovery teams are detectives who collect surveillance video from doorbells, cameras, and all cameras in the city to gather evidence. They download the footage quickly, put it onto their forensic thumb drive, and bring it back to the police department for a quick and easy upload.

"He remarked, "That is tedious. I've been involved in that, and it requires a dedicated team to watch the footage around the clock.""

Investigators are likely searching for footage of the assailant's arrival in the city ten days before the shooting to obtain a clearer image of his face.