All weekend long after the attack, police had been looking through evidence, and the following Monday their focus turned to the hours of surveillance footage from security cameras on campus.