[mdekkers]

there are hashes of known child pornography content on the drive

On an encrypted drive? Sounds like bullshit to me.

[khedoros1]

I've been assuming that they saw him connect to a torrent tracker and download files with known hashes, or something.