DETECTIVE LAB

Use the steps below to investigate the missing laptop.

Step 3: Check who logged into the missing laptop

Finally, we review the login logs for the missing Dell XPS 13 to see who actually used it.

SQL Query

SELECT 
    e.first_name,
    e.last_name,
    ll.login_time
FROM login_logs ll
JOIN employees e ON ll.employee_id = e.employee_id
WHERE ll.device_id = 1;

Results

[
  {
    "first_name": "Jason",
    "last_name": "Miller",
    "login_time": "2026-03-18T20:12:00.000Z"
  }
]

Explanation

Jason Miller logged into the missing laptop at 2:12 PM, which matches the incident window and makes him the primary suspect.