> Maybe I'm missing something but one of the core technical conceits driving the first few episodes is that an IP address found inside a "dat" file is compellin

> Maybe I'm missing something but one of the core technical conceits driving the first few episodes is that an IP address found inside a "dat" file is compelling evidence that the person with that IP address was guilty of something. Of having an IP address that somebody typed into a file? I didn't get that. As I say perhaps I misunderstood. It's been a while, but as I understood it, the "dat file" was (ostensibly) part of a professional forensic dump of a filesystem on a compromised server, and the IP was buried somewhere in the malware itself as the address from which commands were accepted.