I think, for Cyberninjas, that this will follow the, "Never ask a question you don't already know the answer for", principle.
IOW, the endpoint machines should have originating IP/port data and all cyberninjas needs to know is the route it took to get from Dominion, in the MC situation, to the MC network endpoint.
It would be like seeing a car with out of state plates in the neighbor's driveway. You know where it came from and where it ended up, but not he actual route it took. You could, if curious enough, get a good baseline, though, by using Google Maps.
Gists of questioning would be along the lines of if ports were opened in the MC WAN entrypoint, who did that, from where, and why?
If no edits were made on the router for network traffic to MC endpoints, then where was that access from? Were there hidden access points? Who set them up?
None of the answers, if given honestly, will be good for MC, and that shit will blow back on Shadegg if the MC BOS are not honest. Wiggle room is tightening for the MC BOS. Lies will be obvious.
Bottom line is, if the Cyberninja's questions are technical and specific enough, there should be no bullshit involved in the answers they get. Just the facts, ma'am.
Shadegg is just a figurehead middleman to allow MC BOS to save face after having to cough up the router logs they spent a half a year trying to hide. My 2 cents.