Agents were able to use “digital forensic techniques to determine the person behind the keyboard at the time the emails in question were sent,” How does this w

Agents were able to use “digital forensic techniques to determine the person behind the keyboard at the time the emails in question were sent,” How does this work? Does this refer to tracking IP addresses accessing the account? And is this information provided by Google?