generally, the first thing they go for is the Transfer sheets which I am sure they already have. They can also get NOBO and if NOBO shows it has a declined by owner of shares they can see through that also.They track everything. All the M/M and broker dealers will be looked at also and have to turn over all records etc for trades and customer account tickets. They can also subpoena Email accounts from the service providers as well.That is why it takes quite awhile to get all the info they need before something of importance is announced by them