Question

scene 3:
four days after his arrest, on march 19th, local journalists received a screenshot from a chat room. in the screenshot, it shows several students (brian wales, derek yates, marcus lin) seemingly discussing how they deliberately smeared weavers reputation by setting up the election rigging. weaver asks police to drop the investigation.
the police reviewed video evidence from a campus surveillance video in the computer lab where weaver was arrested. the video shows weaver intercepted an email from a student, sheridan c., to the university administrator. sheridan complained to the administrator that she was unable to vote. weaver is seen pulling up a spreadsheet on his computer, and then entering sheridans username and password to access her email. he then wrote a second email to the administrator, posing as sheridan, and writing that she was now able to vote and to disregard the first email. then, he deleted the entire conversation from sheridans inbox.
this video footage gave police all they needed to obtain a warrant for weavers computer. the fbi was then called in to the investigation to provide digital forensic support. the first step by the fbi was to review weavers browser history. below is an excerpt from his browser history log that shows several relevant entries (irrelevant entries are not shown.)
based on his web history, what conclusions can you (the digital forensic expert) provide in your report?
weaver researched and planned use of the keyloggers, and ordered the keyloggers for his use in election rigging.
weaver used student information from the keyloggers to set up a fake chat and implicate other students.
weaver both researched and ordered keyloggers, and likely set up the fake chat that implicated other students.
the evidence suggests that weaver is innocent of the charges.

Explanation:

Looking at the web - history, on 1/3/2012, there are searches related to "How to Rig an Election" and "Jail Time for Keylogger", which shows research. On 1/15/2012, there is a visit to amazon.com with the window title "Keyloggers" and "Your Payment Details", indicating an order. Also, the chat - room related activities (visits to CSUSM.chat.edu) and the fact that other students (Brian Wales, Derek Yates, Marcus Lin) are implicated (as per the first part of the text about the chat - room screenshot) suggest that Weaver likely set up the fake chat.

Answer:

Weaver both researched and ordered keyloggers, and likely set up the fake chat that implicated other students.