Couldn't they trace the IP that the RAT was phoning home to for a lead on the external culprit, given they were on campus and the possibility of matching the ti

Couldn't they trace the IP that the RAT was phoning home to for a lead on the external culprit, given they were on campus and the possibility of matching the times of the RAT accessing victim's machine and possible CCTV footage of any dorm hall entrances indicated by IP and logs of users etc.