They've already backpeddled into "it's not true, the auditors are inexperienced" even with the images. They just need to show what the files actually contain to prove them wrong.
On top of that, I assume everything that is on those machines has already been saved and backed up when the military seized the servers in Germany. White hats, for sure, definitely watched and collected all data in real time. Even if they know how to more effectively scrub data in other machines, there will always be a discrepancy when they pair it with what the military has. They're done for if they continue to delete stuff in other states.
They've already backpeddled into "it's not true, the auditors are inexperienced" even with the images. They just need to show what the files actually contain to prove them wrong.
On top of that, I assume everything that is on those machines has already been saved and backed up when the military seized the servers in Germany. White hats, for sure, definitely watched and collected all data in real time. Even if they know how to more effectively scrub data in other machines, there will always be a discrepancy when they pair it with what the military has. They're done for if they continue to delete stuff in other states.