Ok, let's think this through: 1. Anthony PC taken and cloned around the 16th of July - LE had logs files that early on - if search exists then, you can assume premeditation 2. Compaq laptop retrieved when LE impounded the car on July 16th - so if searches were on the laptop/ISP/Google log files at that time, also implies Casey & premeditation 3. Key-stroke programs likely installed before Computer returned to the Anthony's so if searches occurred at any time while Casey was in jail, then it was likely Geo, Cindy, or Lee - researching something they found or learned from Casey 4. if searches occurred any time while Casey was out on bond - could have been any (or all of them together) researching 5. If searches occurred after Casey was returned to jail and especially after last Wednesday - then it almost probably was Cindy IMO - cops had the search logs very, very early on and ordered chloroform testing for that very reason. Also, it will be fairly possible to determine WHO did do the searches, based upon other applications in use during the same on line session. Use of any applications like email, chat programs that require a password will determine who was on at the time. Likewise, visits to any sites that require passwords, like My Space, Aim, on line Banking, the infamous ATT on line record site, also all require passwords. The likelihood of say responding to a chat at 23:01:31 then hitting a page from the google results at 23:01:49 being two specific and separate individuals in highly unlikely. Try it. See how fast you can get someone to sit in your puter chair and switch to any other app you have open. Computer forensics are less complicated than it would seem.