Nearly 100 minutes before former President Donald J. Trump took the stage in Butler, Pa., a local countersniper who was part of the broader security detail let his colleagues know his shift was ending.
“Guys I am out. Be safe,” he texted to a group of colleagues at 4:19 p.m. on July 13. He exited the second floor of a warehouse that overlooked the campaign rally site, leaving two other countersnipers behind.
Outside, the officer noticed a young man with long stringy hair sitting on a picnic table near the warehouse. So at 4:26 p.m., he texted his colleagues about the man, who was outside the fenced area of the Butler Fair Show grounds where Mr. Trump was to appear. He said that the person would have seen him come out with his rifle and “knows you guys are up there.”
The countersniper who sent the texts confirmed to The New York Times that the individual he saw was later identified as the gunman.
By 5:10 p.m., the young man was no longer on the picnic table. He was right below the countersnipers, who were upstairs in a warehouse owned by AGR International. One of the countersnipers took pictures of him, according to a law enforcement after-action report, which along with the texts from the Beaver County Emergency Services Unit was provided to The Times by the office of Senator Charles E. Grassley, Republican of Iowa.
At 5:38 p.m., the photos were shared in a group chat, and another text went out among the officers, saying they should inform the Secret Service. “Kid learning around building we are in. AGR I believe it is. I did see him with a range finder looking towards stage. FYI. If you wanna notify SS snipers to look out. I lost sight of him.”
By 6:11 p.m., the “kid” would be dead on the roof of a warehouse connected to the one the countersnipers were stationed in, after having been shot by the Secret Service for trying to kill a former president.
Taken together, the text messages provide the most detailed picture yet of the hours before the assassination attempt. They reveal that the gunman, later identified as Thomas Crooks, 20, of Bethel Park, Pa., aroused police suspicion more than 90 minutes before the shooting, rather than about 60 minutes, as has been previously discussed in congressional hearings.
The messages also add to the evidence that the would-be assassin was often one step ahead of security forces, and in particular the Secret Service.
Mr. Crooks scoped out the rally site a day before the Secret Service did. He used a drone to survey the site while the Secret Service did not seek permission to use one for the rally. He researched how far Lee Harvey Oswald was from John F. Kennedy when he fatally shot the president in 1963 — the answer is about 265 feet — and managed to climb onto a roof that was about 400 feet from Mr. Trump at its closest point. The Secret Service left that roof unmanned.
And while countersnipers were assigned to surveil the rally, Mr. Crooks was also in a position to watch them.
Even after the episode ended, the police seemed confused about what Mr. Crooks had done and how.
“So, on TV, they’re saying Trump was shot at, and he got hit, but I don’t believe that,” one local police officer said to another 17 minutes after the shooting, in a conversation captured on a body-worn camera.
As the officers in the video walk toward the warehouse on which Mr. Crooks’s lifeless body lay, one can be heard saying, “I’m trying to figure out how this guy got here.”
Investigators are still trying to determine Mr. Crooks’s motivations and his actions in the days before the rally, in part from what they have found on his personal devices. But the texts and footage, combined with interviews by The Times and public testimony by investigators, have filled in some of the answers.
Mr. Crooks already had the AR-15-style semiautomatic rifle he brought to the rally. He purchased it in October from his father, who had acquired it legally in 2013.
He began to receive packages at his house in the Pittsburgh suburbs, including fertilizer pellets and radio devices. He would later use some of this material to build rudimentary bombs, two of which were found in his vehicle after the shooting and another in his home.
Mr. Crooks had started searching online for information on famous people, including the F.B.I. director, Christopher A. Wray, Attorney General Merrick B. Garland, President Biden and Mr. Trump. He also looked up “major depressive disorder.”
On July 3, Mr. Trump’s campaign announced the rally in Butler for 10 days later, and Mr. Crooks narrowed his focus to the former president — and to past assassinations.
On July 6, Mr. Crooks typed in an ominous phrase.
“He did a Google search for ‘How far away was Oswald from Kennedy?’” Mr. Wray told a congressional committee last week.
The next day, Mr. Crooks drove to the farm show grounds, about an hour from his home. He spent 20 minutes there, investigators said. He also registered to attend the rally.
Secret Service agents would not hold their first walk-through until the following day, July 8, joined by law enforcement officials from several local and state agencies.
It was then that the Secret Service decided to exclude the entire warehouse complex owned by AGR, including Building No. 6, which Mr. Crooks would later use, from its inner security perimeter. This meant that on the day of the rally, Mr. Crooks was able to approach the building without passing through security screening.
There is still confusion about which agency was supposed to oversee the roof. Kimberly A. Cheatle, then the director of the Secret Service, told a House committee on Monday that she did not know whose job that was. She resigned the next day.
After their walk-through, the Secret Service had asked local agencies to provide more help. Text messages show that Beaver County struggled to find enough volunteers to cover the 12-hour shift. A leader says that one of the available snipers could arrive at 8 a.m. but would need to leave by 4 p.m.
“That works,” another leader responded in the texts.
On Thursday, July 11, the Secret Service returned to the site for a final walk-through with its local partners.
The next day, Mr. Crooks made his own final preparations. He went to a shooting range, the Clairton Sportsmen’s Club, around 2:30 p.m., and practiced with his AR-15-style rifle.
On Saturday morning, July 13, the timelines of the security personnel and the would-be assassin converged.
Officers from several local law enforcement agencies were scheduled for a briefing at 9 a.m. at the Brady Paul Lodge in Butler, according to a plan shown in the text messages. The after-action report indicates the Secret Service was not in attendance.
At the same time, Mr. Crooks was at the Home Depot in Bethel Park purchasing a ladder. A bloody receipt, found in the shooter’s pocket after he was killed, showed he bought it around 9:30 a.m.
Then Mr. Crooks drove to the rally site, reaching the show grounds by around 10 a.m. and staying about 70 minutes — even as the local countersnipers were arriving.
When Mr. Crooks left, he drove back to his hometown and bought 50 rounds of ammunition at Allegheny Arms & Gun Works. Then he returned to Butler, arriving at the farm show grounds in his Hyundai Sonata at about 3:35 p.m., according to geolocation information from one of his cellphones. About 15 minutes later, he flew his drone over the site for 11 minutes, including in a path about 200 yards from Mr. Trump’s podium.
He finished using his drone and sat at the picnic table, where the countersniper spotted him.
Mr. Crooks walked to his car, left the drone inside and was soon hanging around the warehouse complex.
Unlike the other visitors, he was not trying to enter the rally site through the security checkpoints, a fact that attracted the attention of the local countersnipers inside the warehouse. One of them took photos of him at 5:14 p.m.
Col. Christopher Paris, the Pennsylvania State Police commissioner, testified in a congressional hearing on Tuesday that officers were busy that day, responding to more than 100 heat-related emergencies. There were also other suspicious people whom security officials were trying to assess at the rally, which is not unusual for such events, Colonel Paris said.
But then, Mr. Crooks did something that alarmed the police. They saw him using the range finder.
A Beaver County countersniper shared two photos of Mr. Crooks with his colleagues at 5:38 p.m., which were then relayed to the Secret Service, through a series of steps in the command center.
One of the two remaining countersnipers “ran out of the building attempting to keep eyes on Crooks until other law enforcement arrived,” according to a statement by Richard Goldinger, the Butler County district attorney, who supervises some of the law enforcement units.
But Mr. Crooks ran off, taking a backpack with him, Mr. Goldinger said. When the officer was unable to find Mr. Crooks, he returned to his post.
Four Butler Township police officers who had been directing traffic joined the manhunt.
At 6 p.m., one officer in the group texts guessed that Mr. Crooks was moving toward the back of the complex of AGR buildings, “away from the event.” Instead, Mr. Crooks clambered onto the low-slung building in the complex closest to the stage.
Mr. Trump took the podium at 6:03 p.m., to a roaring crowd.
Six minutes later, rally attendees began pointing to someone on the roof of the warehouse. Either through luck or preparation, Mr. Crooks had found a place on the roof that let him see Mr. Trump clearly, but also seemed to keep him somewhat hidden from the Secret Service countersnipers.
Though Mr. Crooks did not bring his newly purchased ladder, he managed to climb onto the roof and walk across a complex of interconnected roofs, Mr. Wray testified.
The Butler Township officers had no ladder themselves, so one officer boosted up another, who grabbed the roof and pulled himself up — to find Mr. Crooks pointing a gun at him. With no hands left to pull his own gun, the officer dropped.
At 6:11 p.m., Mr. Crooks let loose his first rounds.
In the end, Mr. Trump was spared not by the vast law-enforcement contingent protecting him, but by chance. He turned his head, and Mr. Crooks’s first bullet whizzed by close enough to graze his ear.
The former president dived to the ground, and Mr. Crooks sent off another round. The second Secret Service sniper team fired back, and killed Mr. Crooks.
The body-camera footage shows officers climbing a ladder to find Mr. Crooks lying dead on the roof: a slight man, wearing black sneakers, a T-shirt and cargo shorts. His backpack and rifle lay nearby. A long trail of blood ran from his body down to the roof’s gutter.
“Looks like, what, at least eight,” one of them says, counting shell casings around him. “One, two, three, four, five, six, seven, eight. At least eight.”
The post Gunman at Trump Rally Was Often a Step Ahead of the Secret Service appeared first on New York Times.
