NCIS (2003–…): Season 12, Episode 10 - House Rules - full transcript
It's Christmas and when someone hacks the Internet shutting it down, there's concern that it could be an attack. So everyone is called in. Gibbs decides to bring all the hackers they arrested and bring them to NCIS to help them. Gibbs puts McGee in charge and he's not sure if he's the right one. They want to help by going online but Gibbs won't let them. When the Internet goes back on they think the worst has passed but Gibbs thinks there's still more. They eventually learn one of the hackers made contact with the one they are looking for.
McGEE:
Dear Dad, Merry Christmas Eve.
Because we usually end up saying
the wrong things when we talk,
in lieu of presents this year,
I'm writing a letter.
Even though a blank page
and a conversation with you
can be equally scary,
I am a published novelist.
I wanna tell you about an
unusual case NCIS had last week.
A case that reminded me of you
because it was about rules.
And in hindsight, it's helped me
realize a few things.
About you, me, us. So here goes.
It all started
with a news report last week.
- MAN [ON TV]: WJGZ breaking news.
- Good evening. I'm Guy Ross.
The nation's capital tonight
is experiencing
a citywide Internet shutdown.
WJGZ has just received word that
the interruption of service
may be the result of a group
of coordinated hackers.
Authorities say
they're looking into the matter,
but there is no immediate
cause for alarm.
Which has many questioning,
is this a coincidence?
Or is the city
under cyber-attack?
McGEE:
Rule 39.
McGEE: It's no secret you ruled with
an iron fist. A co-worker once made
a comparison to the film
The Great Santini.
I won't name names,
but it was Tony.
You've always questioned
my career choice at NCIS.
But I know you respect Agent
Gibbs as someone who lives
by a set of rules
not to be broken. For example:
- Where's McGee?
- I left messages on his home phone,
cell and BlackBerry. No answer.
- Rule Number 3.
- Never be unreachable.
Boss, I'm sorry I'm late.
I couldn't hear my cell.
- It won't happen again, boss.
- You're right, McGee, it won't.
Ah, we were so close.
Yup, less than three hours
from being officially
on holiday leave.
A miracle second
only to the birth of baby Jesus.
Mm-hm.
Then we get a call at 9:30
on a Saturday night.
Clearly, you had big plans.
Are those your pajamas?
In winter, I put my sweats
in the dryer just before bed.
So that when I get
under the covers, it's warm.
And Gibbs called and it felt
like a waste not to put them on.
Where were you,
the shooting range?
- Yes. On a date.
- GIBBS: No silent night for you.
It will be now.
Okay, what do we know?
Uh, that the civilian Internet
and the military Intranet
are two separate things.
Yes, the lay people
of Washington, D.C.
may not have their computers,
but we can still shop online.
And why we've been asked
to help. This is big, Gibbs.
A DDoS attack
that crashes D.C.
takes a massive coordination
of users and botnets.
BISHOP:
Uh...
So pretend that
this filing cabinet
is a local service provider.
And you wanna access
the Internet, so...
- It's pretend, boss.
- BISHOP: Open it.
Except my computer's already
pretending to use that drawer.
Try another one.
Mm. I am also pretending
to use that drawer too.
- Try another one.
- I don't like this game.
Okay, so now,
imagine hundreds of hackers
doing that 1,000 times
a minute.
- What is the point?
- We don't know.
- It's the calm before the storm.
- Well, what's the storm?
City infrastructure? Taking out
transportation or power grids?
- Or it could be a data breach.
- D.C. is full of targets.
Which is why cyber divisions
of the FBI, Homeland,
NSA and Metro
are all on the highest alert.
- Where is McGee?
- Down in the cyber basement.
Along with everyone else,
looking for answers.
Or a connection, or a lead.
Anything, really.
Well, it sounds like
there are enough people
working on this one
right now, boss.
Yeah, uh, and my sweatpants
are getting cold.
Oh, I do hope
you aren't hinting at leaving.
TONY: No, no, I think--
- No, we're here to work.
Break does not start
until we figure out
what the hell is going on.
Find something. Fast.
[PHONE RINGING]
Ooh, I'm gonna go out on a limb
and say Abby's got something.
- Hey, Abs, you got something?
- You think I'd call you to chat?
- How was your date last night?
- TONY: It was good.
- No chance to reload, though.
- I'm sending you something now.
- McGEE: Hey, Abs.
- McGee. You're back already.
Yeah. Cyber division
can handle this without me.
- Aw, they kicked you out. I know.
- So clique-y down there.
All they found
was the username of the guy
getting all the hackers
together to hit D.C.
Message boards, I read them.
It's Krampus.
Involved in every major U.S.
hack in the last three years.
Yet no one's been able
to ID him.
Luckily, I have my research.
Vintage Krampus postcards.
- McGEE: This is terrifying.
- It's German.
So Saint Nicholas gives gifts
to the good kids,
and Krampus kidnaps the bad ones
and eats them?
America watered it down
to coal in a sock. Boring.
- Is this your research?
- No, ha-ha-ha.
I've been running down
Krampus' history
of hacks and cracks
and phreaks and spams
and general online mischief,
and identified three people
who've had past encounters
with our Christmas demon.
Person of Interest A.
- IT Kevin?
- Yeah.
Dealt with Krampus when he was
an NCIS systems administrator.
Before he tried to sell
a computer virus to terrorists.
ABBY: Person of Interest B,
Heidi Partridge.
Kindergarten teacher
turned dark webmaster.
And allegedly sold goods
to a user named--
Wait for it, wait for it...
Krampus.
So who's Number 3?
Ajay Khan.
Former cyber terrorist.
This is the connection.
They can tell us Krampus' plans.
We either put them in prison
or we made sure they stayed.
- It's a bad idea.
- No, it's not.
Gibbs knows I speak their
language. He's gonna send me.
I'll be in charge. This could
be the worst Christmas ever.
Come on, McGee,
let your Grinch heart grow.
Abby, listen, please, please
just keep this between us.
Oof.
Listen, boss, I know we need
to find this Krampus
before whatever he's planning
happens, but talking to hackers?
Go to each prison
and talk to three criminals
who aren't gonna answer
the questions we ask.
I just--
I think it's a waste of time.
- I agree.
- Really?
Yes, which is why
they're coming here.
Prison transports
will be here first thing.
- Oof.
- What? There a problem, Tim?
No, boss. It's a great plan.
Tony's idea.
So Tony's taking lead on this?
Ha-ha-ha. No, you are.
You speak geek.
Anything to close this case
and open my vacation.
So go get your binary buddies
to cough up some info, will you?
Even if it means
breaking Rule Number 1?
- Which one?
- Both.
Never put your suspects together,
and never screw over your partner.
Merry Krampus.
McGEE: We talk a lot about fathers
at NCIS, and for good reason.
As agents, we not only deal
with the legal code of justice.
We also have a personal code
of rights and wrongs
instilled by our parents.
The disciplinary code
of Team Gibbs
is heavily influenced
by our dads.
Gibbs learned from his father.
Tony's still trying
to figure out his.
I hear Bishop's dad
has rules of his own.
And Ziva's dad was,
well, not kosher.
But now, with three
criminal computer hackers
coming into NCIS, it was
my turn to play the parent.
And I must admit, Dad, I saw
shades of you coming through.
What the hell is this?
They're all in one van?
Responsible government spending.
Oh, why start now?
I didn't actually think
we were gonna break
Rule Number 1.
We'll use it to our advantage.
From what I understand, uh,
computer geeks
can be a little competitive.
- This sucks.
- When are we going back?
- Hey, guys. Nice to see you.
- We missed the gift exchange.
And the holiday chow. This is
the only week we get two rolls.
My gift exchange
isn't until Wednesday.
But I still need to shop for
my cellmate. He's very picky.
- Shut up and get out.
- Line up outside the van.
Nobody say anything.
This is voluntary rendition.
My lawyer's checking in to make
sure we're still in America.
- Inside voices, children.
- No talking, inmate.
Oh, I remember you.
You're just the computer nerd.
Who's really in charge?
Not Agent Gibbs. I'm not allowed
to be in his eyeline ever again.
Hey. No talking.
I'm the one in charge, and
you're gonna respect this badge.
Or else you'll never get
another roll again in your life.
Don't let them get to you.
McGEE: Which is easier said
than done.
That's why it's Rule Number 10.
When did you start caring
about the rules?
- My rules.
- Yeah, which ones?
Rule 10. Never get
personally involved on a case.
- I think I killed someone, Tim.
- Sarah, I'm a federal agent.
- I have a responsibility.
- I didn't come to an agent.
- I came to my big brother.
- Forgive me, director,
for not putting the integrity of NCIS
before my sister.
It won't happen again.
- And this is?
- A peace offering.
While you're here.
Uh, trade me.
These are too small and jingoistic.
No, those are mine from
my locker. He won't want them.
I'd be more than happy to get
in your pants, Agent Bishop.
Imagine, a horny computer geek.
It's an open invitation. I can
be hot for kindergarten teacher.
Ah!
- What's that supposed to mean?
- Exactly what it says.
No CP for you and you and you.
It's also an obscure film
reference. Breakfast Club.
More old movies? Move on, man.
If we can't use computers,
how are we supposed
to help you ID Krampus?
- We can't anyway.
- Because we don't know anything.
Kevin. Hey. We talked
about this in the van, man.
Come on, Kev.
Don't side with them.
It's the first day of prison
all over again.
- Come on, man. Come on.
- Okay.
- Kevin.
- Only because it's true.
I wish I knew something to help.
Oh, come on, are you
such hardened criminals
that you don't care
about anyone on the outside?
ALL:
Eh.
- You all know Krampus.
- HEIDI: Knew him.
People convicted
of computer crimes
don't get Internet privileges
in jail.
- I've been in for over a year.
- Two years.
Three months, but the first
months are really hard.
Anyway, the point is,
boys and girls, in Internet years,
we've been out of contact
with our world for decades.
Until we get computers,
or access to the MTAC.
- HEIDI: Mm-hm.
- Heh, heh.
The Internet's out citywide. You
wouldn't have brought us in
unless something bigger
was about to happen.
We might be willing
to figure out what that is.
[PHONE RINGING]
Yeah, boss. Uh-huh.
Okay, got it.
The attack?
Do we know what it is?
It's over.
The Internet's back on?
The real Internet
- for the huddled D.C. masses?
- I didn't touch anything.
It does mean the hackers go back
to jail, which is great news.
It's weird news. I mean,
there were no residual effects?
Bad guys didn't leave anything
behind? No viruses?
The attacks just slowed down,
and then eventually stopped.
- Running server tests now.
- I don't know, McGee.
I feel we're getting played,
like we're gonna wake up
on Christmas morning
[PHONE RINGING]
And all the trees and presents
are gonna be gone.
Oh, Sarah. Do you have
Christmas plans with the family?
Yup, the whole fam,
including Dad.
Oh, that's good. So are his
chemotherapy treatments working?
[COMPUTER BEEPING]
Server test came back.
- Uh-oh.
- I knew it.
A server farm in Anacostia
is still under attack.
Why would all the other attacks
just stop?
Unless we are being played.
McGEE:
Rules Number 36 and 40.
TONY: And then there's my
favorite rule, Number 36.
If you feel like you're
being played, you probably are.
- Gibbs mentioned Rule 40.
- Someone's out to get you?
This one's just addressed
to NCIS special agent.
I think that's mine, McGee.
Evacuate,
get everybody out of here.
GIBBS:
Abs!
McGEE: Suffering the consequences
of the rules
is like being sent to your
room without dinner.
You know, Dad,
when you did that,
Mom always brought me a
ham and cheese 20 minutes later.
But your punishments
still stung.
However, as a kid,
I never realized
that enforcing the rules
can feel just as bad.
You don't wanna be the bad guy.
Whether sending kids to their
room or criminals to prison,
sometimes it has to be done.
Gibbs. The citywide attack was
just Krampus' little helpers
causing a distraction
so he could hack a lone server.
- We know what he's after, boss.
- Congressional e-mails?
ABBY:
Krampus wants to send a message
to the naughty U.S. government.
- KHAN: More leaked crotch pics.
- Finally, truth in Washington.
Government e-mail accounts
contain more than lewd selfies.
Yeah, there's deployments and
anti-terrorist strategy memos.
Giving ISIS a Christmas present
this good, they might convert.
- Good luck, sweet cheeks.
- Stop.
- Thanks, I can handle myself.
- No, not him. You.
They're not going anywhere.
Boss, they're talented hackers,
but we can't let them
near a computer.
- How else are they gonna help?
- Figure it out, McGee.
Don't waste good.
McGEE: That's Rule Number 5.
Sometimes, it's hard
to tell the difference
between rules and punishments.
Go.
- Where are Tony and the hot one?
- KEVIN: Likely the server farm.
- Standard procedure.
- You wish you were there?
Server technicians would have
taken the place offline
after NCIS discovered
it was the target.
Yeah, 12 hours later.
Krampus has the data.
It's a matter of when he
releases it. Get us online.
Or the intel leaks,
and the country sees
Congress' ineptitude. Win-win.
If I were them, I wouldn't let
you guys near computers, either.
What? You were them,
which makes you a traitor.
[PHONE BEEPS]
- If they move, shoot them.
- KHAN: Hey.
If you won't talk to us, why
are we here? I want my rolls.
Your role
is staying out of the way.
McGEE: Of course,
rules are up for interpretation.
Gibbs' rules aren't just
for being a good agent.
No more than your rules
about not using the kitchen
for science projects
were about food safety, Dad.
So the dead guy
was at the server farm?
Hooked up to a utility box.
Hacking servers
using on-site data lines
- is risky and unusual, but--
- It possible?
It is that magic time of year
when anything's possible.
- Who is he?
- No ID.
His prints aren't in the system.
You recognize him?
That's not how anonymous message
boards and hackers usually work.
No, don't recognize him.
Ducky's got the body in autopsy?
Field trip.
Who wants to see a dead body?
McGEE: What are you guys
doing out here?
- I told you to shoot them.
- My idea, Tim.
Those are sorry excuses
for personal computers.
- Nice monitors.
- They're government-issued.
By the
First Continental Congress?
[KHAN CHUCKLES]
Hey, MTAC. Bet the monitors
are newer in there.
- Not really.
- Enough.
You're gonna identify the body.
Come on, bring them down.
Wait, boss,
you want them to go to autopsy?
People online don't know
what each other look like.
- It's anonymous, impersonal.
- Tim.
It's about to get very personal.
The mean and very
raggedy-looking Belsnickel
Knecht Ruprecht
with his bag of ashes.
And the creature-like Krampus,
with his rusty nails
and chains and bells.
I mean, what better way to show
the light of Father Christmas
than to examine
the dark alternatives?
GIBBS:
Cause of death, Duck?
Ah, well, organs show signs
of malnutrition and enlargement.
Consistent with exhaustion
and high blood pressure.
A heart attack
is not out of the question.
KHAN: I read about
a South Korean dude
who died from playing video
games for 27 days straight.
- Urban legend.
- DUCKY: No, no, no.
What Mr. Khan is saying
is possible.
Prolonged lack of sleep
and improper nutrition
cause immense stresses
on the body.
So did this guy die while
extreme hacking the servers?
It's inconclusive thus far.
I've estimated the time of death
as late last night
or early this morning.
Krampus called in the threat
at 10:00 a.m. It's not him.
If he was hacking on-site,
he'd have a computer.
- Right.
- It would help ID him.
- In the snow, all night long.
- That needs to be dried out.
- Six to eight hours.
- Yeah, more like 12.
HEIDI: Not a solid-state drive,
it wouldn't take as long.
We can't wait while Krampus
decides when to leak the intel.
This guy's not Krampus.
He works for him. A lackey.
But if we can ID dead guy, we
connect him to Krampus, and--
I mean, not that we care.
- No, never thought you did.
- We're the bad guys, remember?
Even Santa Claus
needs a team of elves.
McGEE:
Another Gibbs rule.
Rule Number 15,
always work as a team.
Okay, more left.
[YELLS]
[GRUNTING]
Oh, come on.
Ah! It's about time.
I love you, McGee.
So I guess this teamwork
thing is out the window?
No way. Working together
is always better.
Then why did Agent Gibbs
leave us down here?
And why won't you
let us into your lab?
Hey, stay in the line of sight.
I'm confused.
Do you trust us or not?
It's like A Christmas Carol.
Scrooge was shown
all the facts,
and what he does with them
is up to him.
So we're Scrooge? We're supposed
to just have a change of heart?
Because we don't know anything.
Can we skip to Christmas future?
If only wishing made it so.
[PHONE BEEPS]
- Another dead body?
- No, it's my sister.
We're coordinating
Christmas presents.
Hey, uh, you never did say how your
dad's doing on his treatments.
Well, chemo worked
until it didn't.
Surgery is our only option now.
Luckily, he's got one this week.
That's why
you didn't wanna do all this.
McGee, you should have said
something.
[SCOFFS]
It's a Christmas miracle.
You're gonna want to see this.
- Are those--?
- New computer monitors.
- How long have they been there?
- This is dated three years ago.
- And it just says "Bullpen."
- Your tax dollars at work.
- Bishop?
- Can't talk, given company.
McGEE: Because Rules 3 and 8
just came into play, Dad.
Rule Number 3, don't believe
what you're told. Double check.
- Rule 8 will save you.
- Never date a co-worker?
Never go anywhere
without your knife.
- Thought that was 9.
- Never take things for granted.
McGEE: It's just occurred to me
that rules Number 3, 8,
36 and 40 are the same thing.
And with two Rule Number 1s
and two Number 3s,
I'm starting to question
that these are honest mistakes.
Is Gibbs making up these rules
as he goes? Do all parents?
So Heidi lied to us, boss.
She was granted an hour
of unsupervised computer use
- for good behavior.
- Unsupervised isn't monitored.
- Pull prison computer records.
- Already did.
Heidi has been using
an anonymous message board.
The prison's site blocker
missed it.
- But I didn't.
- Who'd she talk to?
Well, I used the prison
computers' keylogger
so we only know
what she typed.
- Krampus.
- Heidi played matchmaker.
Hooked him up with her contacts
to coordinate the attack.
- Location?
- More untraceable usernames.
But it does prove
that Heidi knows Krampus.
- She could lead us to him.
- Could, but hasn't.
No, not yet.
[CHRISTMAS MUSIC PLAYING
ON RECORD PLAYER]
McGEE: If you're lost, Dad,
let me recap.
Sensitive intel was stolen
from a downed Internet server
by a hacker named Krampus.
If leaked, national security
would be at risk.
So we brought in
three criminal hackers
to help track down Krampus.
Although
they've done anything but.
We just discovered one
has been in contact with him
and is fully aware of his plot.
Our only advantage is that she
doesn't know we're onto her.
Tony. Miss us already?
You have a call
from your lawyer. Come on.
- Ah, told you he'd check up.
- The rest of you, no.
You're going
to the conference room.
McGEE: Did I accuse you
of making up parenting strategies
as you went along, Dad?
Well, I'm beginning
to understand the feeling.
We were about to trust
a convicted cyber-criminal.
Where's my phone call?
Wait a minute, there is no call
from my lawyer, is there?
Nope. Sit down.
This another ruse?
Yes, it is. But this time,
you'll be in on it.
What are you talking about?
Krampus is still out there,
so we're forced to be creative.
Like making me think
I was about to be murdered
by terrorists at Guantánamo Bay?
It worked.
- So, what, suddenly you trust me?
- Not in the least.
But we did find something
to barter with.
The only thing
you've ever valued.
Money. Sit down.
McGEE: Visitation records show
you've been meeting
with Internet security companies.
You looking to consult
from your prison cell?
There's a lot of money in it.
Plus, I'm bored.
Yeah, well, so are a lot
of other ex-hackers.
And only the trustworthy ones
land contracts.
Oh, I see.
But if I help you now--
We will make phone calls
and put in a good word
at the federal agencies.
So it's hypothetical money.
Wait, just wait, wait.
Wait. God.
Fine. What do I have to do?
- Just do what you've been doing.
- McGEE: Being a pain in the ass.
And flirting with Heidi.
You stole this cell phone
from Agent Bishop,
and you are going to let
Heidi use it to warn Krampus.
- About?
- Us.
- We're going undercover online.
- Oh, God. Finally.
But wait,
so why would she trust me?
- Not think this is some setup?
- Because you're you, that's why.
Deal.
- Hey. I said we have a deal.
- It's on hold.
McGEE: As a team, there are rules
we choose to ignore,
because the benefits promise
to outweigh consequences.
- Number 22 is one of them.
- Rule Number 22.
Never, ever bother Gibbs
in interrogation.
- Working.
- Gibbs.
I know you hate being
interrupted. This is important.
- It better be.
- Gibbs. Hi.
Uh, could I see you a second, boss?
Never interrupt
an interrogation, McGee.
GIBBS:
Abs?
Gibbs, enter. Quickly.
Can't be too careful with
criminals roaming the highlands.
- You two got something?
- We've been working to ID
our server-farm snowman.
Cause of death wasn't simply
from prolonged computer use,
but from a rare disease
called fatal familial insomnia.
Also known as the inability
to fall asleep.
When the disease
first presented itself,
it might've been seen
as a bonus to a hacker.
Until sleeplessness took a toll
on his body and it shut down.
Usually, the patient falls
into a coma and dies.
But in this case,
heart failure got him first.
- You said it was rare.
- Our victim never reported
- he had the disease, but--
- His father did.
Yep. He died when his son Lyle
was 5 years old.
Lyle became a ward
of New Jersey
until he came of age,
and became a web designer
- and a Krampus disciple.
- Notify local police.
They're already at his apartment
collecting computers, cell phones,
and anything to lead us to Krampus,
who, good news,
hasn't leaked any intel,
only because,
bad news,
he's putting it up for bid.
Everyone from TMZ to ISIS
is licking their chops.
- Can't wait for them to pay up.
- The deal with Khan stands?
Unless you give me
something first.
McGEE: I have to admit
that Abby is another example
of a rule often broken
by our team. Rule Number 12.
- Never date a co-worker.
- Hello, Jethro.
- Yeah?
- Yeah.
- He stay at your place?
- Yep.
- You sleep in the coffin?
- I can't believe I slept
- in a coffin.
- Not just slept.
McGEE: But every rule exists
for a reason.
Because it can come back
to bite you, or worse.
I found those nice new monitors
for you.
I thought we'd use them.
How do you read these things?
Don't make us regret
letting you in here.
I regret agreeing to the terms.
BISHOP: Maryland forensic lab posted
a copy of Lyle's hard drive.
- You type like an eighth-grader.
- You smell like horny concrete.
KEVIN: Tony, you can't do that.
TONY: Why not?
If we're creating an undercover
message board alias,
you can't make your username
Serpico73.
- Why not?
- Pacino was a cop.
[PHONE RINGING]
Yeah. That way,
they will never suspect me.
- Girlfriend?
- Sister.
Sarah, listen, I can't talk now.
I'm in the middle of--
Wait, what? When?
Why didn't he tell us?
Well, I can't be there right now.
Talk to him. I have to go.
That didn't sound like
Christmas-present coordination.
- No, it didn't.
- Told you.
Every word these guys say
is a lie.
It's not about presents, okay?
My father canceled his surgery,
and instead of me being there
to convince him otherwise,
I'm stuck here with all of you.
Well, I need a bathroom break.
Agent Gibbs,
may I have a hall pass?
Door's right over there.
- No detours.
- Okay.
- Don't get lost.
- Okay.
Hey. Here's my chance.
Give me the phone.
Our deal. The restrooms are
next to each other. Come on.
- Forget about it.
- Hey, come--
Dude, look, about your dad,
I'm sorry, okay? I am.
But I can do this.
Shh.
What the hell are you doing?
Bathroom break.
- I don't think they saw me.
- What do you want?
Um...
- To make out.
- Ha. Yeah.
What's in it for me?
Hmm...
- Oh.
- Oh.
McGEE: No activity yet.
KEVIN: You made a deal with Khan?
- I think I would've been a better option.
- BOTH: Shh!
Phone's on.
Why is she using the camera?
Is this part of the plan?
Oh, no.
Uh, Boss?
Ew.
- He double-crossed us.
- McGEE: Like I said, Dad,
a lot of things
can come back to bite you.
KAHN:
Hey.
- Gift exchange is over.
- I was just getting started.
Tell me about it.
I need a cold shower.
That wasn't part of our deal.
- You told her?
- Well, like you said, I'm me.
Furlough free time is over.
I want a lawyer.
McGEE: Gibbs's Rule Number 13.
Never involve lawyers.
- Sorry.
- McGEE: Rule Number 42.
Never accept an apology from
someone who sucker-punched you.
Guess that visit to MTAC is out.
- You mad, bro?
- I'm disappointed.
I'm done with all of you.
McGEE: A parent makes the rules
to help.
You can't force kids to follow,
no matter how hard you try.
They have to make
their own choices.
I suppose I owe you an apology
for those times, Dad.
Which is breaking
yet another rule, actually.
Douglas VonDorothy,
a.k.a. Krampus.
- You found him?
- Yes, with Abby.
Our dead guy in autopsy
kept records
of his message board chats
with Krampus.
They gave away personal details.
Hobbies, regional indicators.
Info you could track on social
media to get real names.
Mm-hm. Only one of which had a
criminal record for computer crimes
- and fit what we knew.
- Where is he?
show him in Rice Lake,
Wisconsin.
His parents own a cabin there.
It's cold, but isolated.
- FBI field office in Chicago?
- Make the call.
Let's just hope
he hasn't found a buyer yet.
- Problem, Tim?
- Be specific when you lie.
People that hide online
know that better than anyone.
- Boss, this feels--
- Too easy?
Yeah. If they show up in Wisconsin
and Krampus isn't there,
he'll disappear with the intel.
Hold on. Am I sending
FBI SWAT to Wisconsin?
- Let's ask her.
- Who, Heidi?
- Why would she talk now?
- Show her who she's protecting.
Boss, can you give that
to someone else?
I can't take it anymore.
I said from the beginning
this wasn't gonna work.
It's a waste of time.
These guys are criminals.
They're not worth it.
McGee.
- Rule 51.
- Fifty-one?
What is--?
I wrote it down once.
That's who you're protecting.
Anything you want to tell us
before the FBI get
to Wisconsin and arrest him?
You still don't have
anything else to say?
Kevin, you wanted to help.
Now's your chance.
- Read his record.
- Yes, anything. Finally.
"Douglas VonDorothy:
While not shutting down cities
as Krampus,
uses other usernames
for online stalking.
Gathering personal information
of ex-girlfriends or wives
for the purpose of continued
harassment or slander."
- Revenge porn.
- For hire.
Don't listen.
This is a made-up file.
That's a photo of a guy from HR.
This is just to guilt-trip you.
This man also has a history
of hacking the cell phones
of random high school girls
and holding embarrassing
pictures for ransom
or posting them online.
Most of these are underage.
Did this guy have a mother?
- This keeps going.
- That's enough for now.
This wasn't political
or someone seeking truth.
For once,
the avatar matches the man.
You're protecting a monster.
So what? I thought you got him.
So what?
That's all you have to say?
How can someone be so callous
and cynical at Christmas?
You're a criminal too,
Bob Cratchit.
I'd give anything to make up for it.
You two are just hopeless,
heartless humbugs.
Heidi, listen to me.
You made bad choices.
And you were caught.
You're a criminal.
But not doing the right thing because
you have nothing to lose or gain?
That just makes you
a bad person.
But that's not you, is it?
Kevin's wrong.
I was wrong.
It's okay to admit it.
McGEE:
Rule Number 51.
Sometimes you're wrong, Heidi.
Believe it or not, before all of this,
I was a good teacher.
I taught my students
right and wrong.
To clean up their messes.
Krampus isn't in Wisconsin.
But you know where he is,
don't you?
Mm-hm.
Left a mess
I have to clean up now.
McGEE: That happens
to be Rule Number 45.
And what I slowly realized
Gibbs' rules are all about.
What they're meant to prevent.
Messes, problems,
screw-ups, mistakes.
But when messes
and problems happen,
the rules are also there
to protect us.
And because each of us
live by those rules,
we know
that no matter how many we break,
no matter how much
we screw up,
there will be someone
to save us.
Which is what Christmas
is about too.
Someone giving us
a second chance.
Like a parent. A father.
FBI raided the Jacksonville
retirement community
where known hacker
Douglas VonDorothy lived
with his elderly parents
under false names.
VonDorothy was arrested
and taken into custody.
- I told you I'd get into MTAC.
- There he is.
WOMAN: Cyber division
has recovered hard drives
thought to contain
vital security intel
stolen from Washington, D.C.
Internet servers
late last night.
[WHISTLES]
Nice, Tim.
McGEE: The case helped me
recognize all the hard, thankless work
you put in over the years.
That while I've learned a lot
from Gibbs,
it's only possible
because of how I was raised.
By you.
You may not have numbered
your rules, Dad,
but they were meant
to teach the same lessons.
You taught me
to always be prepared.
- Always stand up for yourself.
- Then go. I'm staying.
McGEE:
But if you're wrong, admit it.
I'm still leaving out a few,
but maybe hitting them all
was too lofty a goal.
Dad, how can you say that?
It's not about you sometimes.
Oh, I'm stubborn? Gee,
I wonder who I get that from?
[SIGHS]
No, we have
the whole week off.
There are other agents here,
Dad.
Look, I have to go.
I'll see you in an hour.
Notice anything different,
McGeek?
We installed
the new computer monitors.
- You touched my desk?
- It was their idea.
- We wanted to thank you.
- What? Don't say that out loud.
No, this monitor
should be more to the left and--
To the van. Nobody needs
to see this part of Tim McGee.
- Come on, IT Kevin.
- McGEE: You didn't bundle the cables?
What are you still doing here,
McGee?
Your dad made time for you.
Return the favor.
McGEE: Postponing that surgery
was you doing everything you could
to make sure we had
this last holiday week together.
Not in the hospital room,
but as a family. All of us.
Why you couldn't have
just said that is beyond me.
But I guess I'm the one
who has to write a letter.
Communication
was never our strong suit, Dad.
And we haven't always seen
eye-to-eye.
But your rules,
my breaking of them,
our ensuing arguments,
the resulting punishments--
[KNOCKING ON DOOR]
Uh, people will be arriving, Tim.
- Just another minute, please?
- Sure.
Every moment with you,
from growing up
to these last few days,
it meant something to me.
I've heard it takes a man
to make a man.
Well, you've helped make me one.
Before I say goodbye, Dad,
I just wanna say thank you.
For everything.
Merry Christmas, Dad.
I love you.
[SOBBING]
Dear Dad, Merry Christmas Eve.
Because we usually end up saying
the wrong things when we talk,
in lieu of presents this year,
I'm writing a letter.
Even though a blank page
and a conversation with you
can be equally scary,
I am a published novelist.
I wanna tell you about an
unusual case NCIS had last week.
A case that reminded me of you
because it was about rules.
And in hindsight, it's helped me
realize a few things.
About you, me, us. So here goes.
It all started
with a news report last week.
- MAN [ON TV]: WJGZ breaking news.
- Good evening. I'm Guy Ross.
The nation's capital tonight
is experiencing
a citywide Internet shutdown.
WJGZ has just received word that
the interruption of service
may be the result of a group
of coordinated hackers.
Authorities say
they're looking into the matter,
but there is no immediate
cause for alarm.
Which has many questioning,
is this a coincidence?
Or is the city
under cyber-attack?
McGEE:
Rule 39.
McGEE: It's no secret you ruled with
an iron fist. A co-worker once made
a comparison to the film
The Great Santini.
I won't name names,
but it was Tony.
You've always questioned
my career choice at NCIS.
But I know you respect Agent
Gibbs as someone who lives
by a set of rules
not to be broken. For example:
- Where's McGee?
- I left messages on his home phone,
cell and BlackBerry. No answer.
- Rule Number 3.
- Never be unreachable.
Boss, I'm sorry I'm late.
I couldn't hear my cell.
- It won't happen again, boss.
- You're right, McGee, it won't.
Ah, we were so close.
Yup, less than three hours
from being officially
on holiday leave.
A miracle second
only to the birth of baby Jesus.
Mm-hm.
Then we get a call at 9:30
on a Saturday night.
Clearly, you had big plans.
Are those your pajamas?
In winter, I put my sweats
in the dryer just before bed.
So that when I get
under the covers, it's warm.
And Gibbs called and it felt
like a waste not to put them on.
Where were you,
the shooting range?
- Yes. On a date.
- GIBBS: No silent night for you.
It will be now.
Okay, what do we know?
Uh, that the civilian Internet
and the military Intranet
are two separate things.
Yes, the lay people
of Washington, D.C.
may not have their computers,
but we can still shop online.
And why we've been asked
to help. This is big, Gibbs.
A DDoS attack
that crashes D.C.
takes a massive coordination
of users and botnets.
BISHOP:
Uh...
So pretend that
this filing cabinet
is a local service provider.
And you wanna access
the Internet, so...
- It's pretend, boss.
- BISHOP: Open it.
Except my computer's already
pretending to use that drawer.
Try another one.
Mm. I am also pretending
to use that drawer too.
- Try another one.
- I don't like this game.
Okay, so now,
imagine hundreds of hackers
doing that 1,000 times
a minute.
- What is the point?
- We don't know.
- It's the calm before the storm.
- Well, what's the storm?
City infrastructure? Taking out
transportation or power grids?
- Or it could be a data breach.
- D.C. is full of targets.
Which is why cyber divisions
of the FBI, Homeland,
NSA and Metro
are all on the highest alert.
- Where is McGee?
- Down in the cyber basement.
Along with everyone else,
looking for answers.
Or a connection, or a lead.
Anything, really.
Well, it sounds like
there are enough people
working on this one
right now, boss.
Yeah, uh, and my sweatpants
are getting cold.
Oh, I do hope
you aren't hinting at leaving.
TONY: No, no, I think--
- No, we're here to work.
Break does not start
until we figure out
what the hell is going on.
Find something. Fast.
[PHONE RINGING]
Ooh, I'm gonna go out on a limb
and say Abby's got something.
- Hey, Abs, you got something?
- You think I'd call you to chat?
- How was your date last night?
- TONY: It was good.
- No chance to reload, though.
- I'm sending you something now.
- McGEE: Hey, Abs.
- McGee. You're back already.
Yeah. Cyber division
can handle this without me.
- Aw, they kicked you out. I know.
- So clique-y down there.
All they found
was the username of the guy
getting all the hackers
together to hit D.C.
Message boards, I read them.
It's Krampus.
Involved in every major U.S.
hack in the last three years.
Yet no one's been able
to ID him.
Luckily, I have my research.
Vintage Krampus postcards.
- McGEE: This is terrifying.
- It's German.
So Saint Nicholas gives gifts
to the good kids,
and Krampus kidnaps the bad ones
and eats them?
America watered it down
to coal in a sock. Boring.
- Is this your research?
- No, ha-ha-ha.
I've been running down
Krampus' history
of hacks and cracks
and phreaks and spams
and general online mischief,
and identified three people
who've had past encounters
with our Christmas demon.
Person of Interest A.
- IT Kevin?
- Yeah.
Dealt with Krampus when he was
an NCIS systems administrator.
Before he tried to sell
a computer virus to terrorists.
ABBY: Person of Interest B,
Heidi Partridge.
Kindergarten teacher
turned dark webmaster.
And allegedly sold goods
to a user named--
Wait for it, wait for it...
Krampus.
So who's Number 3?
Ajay Khan.
Former cyber terrorist.
This is the connection.
They can tell us Krampus' plans.
We either put them in prison
or we made sure they stayed.
- It's a bad idea.
- No, it's not.
Gibbs knows I speak their
language. He's gonna send me.
I'll be in charge. This could
be the worst Christmas ever.
Come on, McGee,
let your Grinch heart grow.
Abby, listen, please, please
just keep this between us.
Oof.
Listen, boss, I know we need
to find this Krampus
before whatever he's planning
happens, but talking to hackers?
Go to each prison
and talk to three criminals
who aren't gonna answer
the questions we ask.
I just--
I think it's a waste of time.
- I agree.
- Really?
Yes, which is why
they're coming here.
Prison transports
will be here first thing.
- Oof.
- What? There a problem, Tim?
No, boss. It's a great plan.
Tony's idea.
So Tony's taking lead on this?
Ha-ha-ha. No, you are.
You speak geek.
Anything to close this case
and open my vacation.
So go get your binary buddies
to cough up some info, will you?
Even if it means
breaking Rule Number 1?
- Which one?
- Both.
Never put your suspects together,
and never screw over your partner.
Merry Krampus.
McGEE: We talk a lot about fathers
at NCIS, and for good reason.
As agents, we not only deal
with the legal code of justice.
We also have a personal code
of rights and wrongs
instilled by our parents.
The disciplinary code
of Team Gibbs
is heavily influenced
by our dads.
Gibbs learned from his father.
Tony's still trying
to figure out his.
I hear Bishop's dad
has rules of his own.
And Ziva's dad was,
well, not kosher.
But now, with three
criminal computer hackers
coming into NCIS, it was
my turn to play the parent.
And I must admit, Dad, I saw
shades of you coming through.
What the hell is this?
They're all in one van?
Responsible government spending.
Oh, why start now?
I didn't actually think
we were gonna break
Rule Number 1.
We'll use it to our advantage.
From what I understand, uh,
computer geeks
can be a little competitive.
- This sucks.
- When are we going back?
- Hey, guys. Nice to see you.
- We missed the gift exchange.
And the holiday chow. This is
the only week we get two rolls.
My gift exchange
isn't until Wednesday.
But I still need to shop for
my cellmate. He's very picky.
- Shut up and get out.
- Line up outside the van.
Nobody say anything.
This is voluntary rendition.
My lawyer's checking in to make
sure we're still in America.
- Inside voices, children.
- No talking, inmate.
Oh, I remember you.
You're just the computer nerd.
Who's really in charge?
Not Agent Gibbs. I'm not allowed
to be in his eyeline ever again.
Hey. No talking.
I'm the one in charge, and
you're gonna respect this badge.
Or else you'll never get
another roll again in your life.
Don't let them get to you.
McGEE: Which is easier said
than done.
That's why it's Rule Number 10.
When did you start caring
about the rules?
- My rules.
- Yeah, which ones?
Rule 10. Never get
personally involved on a case.
- I think I killed someone, Tim.
- Sarah, I'm a federal agent.
- I have a responsibility.
- I didn't come to an agent.
- I came to my big brother.
- Forgive me, director,
for not putting the integrity of NCIS
before my sister.
It won't happen again.
- And this is?
- A peace offering.
While you're here.
Uh, trade me.
These are too small and jingoistic.
No, those are mine from
my locker. He won't want them.
I'd be more than happy to get
in your pants, Agent Bishop.
Imagine, a horny computer geek.
It's an open invitation. I can
be hot for kindergarten teacher.
Ah!
- What's that supposed to mean?
- Exactly what it says.
No CP for you and you and you.
It's also an obscure film
reference. Breakfast Club.
More old movies? Move on, man.
If we can't use computers,
how are we supposed
to help you ID Krampus?
- We can't anyway.
- Because we don't know anything.
Kevin. Hey. We talked
about this in the van, man.
Come on, Kev.
Don't side with them.
It's the first day of prison
all over again.
- Come on, man. Come on.
- Okay.
- Kevin.
- Only because it's true.
I wish I knew something to help.
Oh, come on, are you
such hardened criminals
that you don't care
about anyone on the outside?
ALL:
Eh.
- You all know Krampus.
- HEIDI: Knew him.
People convicted
of computer crimes
don't get Internet privileges
in jail.
- I've been in for over a year.
- Two years.
Three months, but the first
months are really hard.
Anyway, the point is,
boys and girls, in Internet years,
we've been out of contact
with our world for decades.
Until we get computers,
or access to the MTAC.
- HEIDI: Mm-hm.
- Heh, heh.
The Internet's out citywide. You
wouldn't have brought us in
unless something bigger
was about to happen.
We might be willing
to figure out what that is.
[PHONE RINGING]
Yeah, boss. Uh-huh.
Okay, got it.
The attack?
Do we know what it is?
It's over.
The Internet's back on?
The real Internet
- for the huddled D.C. masses?
- I didn't touch anything.
It does mean the hackers go back
to jail, which is great news.
It's weird news. I mean,
there were no residual effects?
Bad guys didn't leave anything
behind? No viruses?
The attacks just slowed down,
and then eventually stopped.
- Running server tests now.
- I don't know, McGee.
I feel we're getting played,
like we're gonna wake up
on Christmas morning
[PHONE RINGING]
And all the trees and presents
are gonna be gone.
Oh, Sarah. Do you have
Christmas plans with the family?
Yup, the whole fam,
including Dad.
Oh, that's good. So are his
chemotherapy treatments working?
[COMPUTER BEEPING]
Server test came back.
- Uh-oh.
- I knew it.
A server farm in Anacostia
is still under attack.
Why would all the other attacks
just stop?
Unless we are being played.
McGEE:
Rules Number 36 and 40.
TONY: And then there's my
favorite rule, Number 36.
If you feel like you're
being played, you probably are.
- Gibbs mentioned Rule 40.
- Someone's out to get you?
This one's just addressed
to NCIS special agent.
I think that's mine, McGee.
Evacuate,
get everybody out of here.
GIBBS:
Abs!
McGEE: Suffering the consequences
of the rules
is like being sent to your
room without dinner.
You know, Dad,
when you did that,
Mom always brought me a
ham and cheese 20 minutes later.
But your punishments
still stung.
However, as a kid,
I never realized
that enforcing the rules
can feel just as bad.
You don't wanna be the bad guy.
Whether sending kids to their
room or criminals to prison,
sometimes it has to be done.
Gibbs. The citywide attack was
just Krampus' little helpers
causing a distraction
so he could hack a lone server.
- We know what he's after, boss.
- Congressional e-mails?
ABBY:
Krampus wants to send a message
to the naughty U.S. government.
- KHAN: More leaked crotch pics.
- Finally, truth in Washington.
Government e-mail accounts
contain more than lewd selfies.
Yeah, there's deployments and
anti-terrorist strategy memos.
Giving ISIS a Christmas present
this good, they might convert.
- Good luck, sweet cheeks.
- Stop.
- Thanks, I can handle myself.
- No, not him. You.
They're not going anywhere.
Boss, they're talented hackers,
but we can't let them
near a computer.
- How else are they gonna help?
- Figure it out, McGee.
Don't waste good.
McGEE: That's Rule Number 5.
Sometimes, it's hard
to tell the difference
between rules and punishments.
Go.
- Where are Tony and the hot one?
- KEVIN: Likely the server farm.
- Standard procedure.
- You wish you were there?
Server technicians would have
taken the place offline
after NCIS discovered
it was the target.
Yeah, 12 hours later.
Krampus has the data.
It's a matter of when he
releases it. Get us online.
Or the intel leaks,
and the country sees
Congress' ineptitude. Win-win.
If I were them, I wouldn't let
you guys near computers, either.
What? You were them,
which makes you a traitor.
[PHONE BEEPS]
- If they move, shoot them.
- KHAN: Hey.
If you won't talk to us, why
are we here? I want my rolls.
Your role
is staying out of the way.
McGEE: Of course,
rules are up for interpretation.
Gibbs' rules aren't just
for being a good agent.
No more than your rules
about not using the kitchen
for science projects
were about food safety, Dad.
So the dead guy
was at the server farm?
Hooked up to a utility box.
Hacking servers
using on-site data lines
- is risky and unusual, but--
- It possible?
It is that magic time of year
when anything's possible.
- Who is he?
- No ID.
His prints aren't in the system.
You recognize him?
That's not how anonymous message
boards and hackers usually work.
No, don't recognize him.
Ducky's got the body in autopsy?
Field trip.
Who wants to see a dead body?
McGEE: What are you guys
doing out here?
- I told you to shoot them.
- My idea, Tim.
Those are sorry excuses
for personal computers.
- Nice monitors.
- They're government-issued.
By the
First Continental Congress?
[KHAN CHUCKLES]
Hey, MTAC. Bet the monitors
are newer in there.
- Not really.
- Enough.
You're gonna identify the body.
Come on, bring them down.
Wait, boss,
you want them to go to autopsy?
People online don't know
what each other look like.
- It's anonymous, impersonal.
- Tim.
It's about to get very personal.
The mean and very
raggedy-looking Belsnickel
Knecht Ruprecht
with his bag of ashes.
And the creature-like Krampus,
with his rusty nails
and chains and bells.
I mean, what better way to show
the light of Father Christmas
than to examine
the dark alternatives?
GIBBS:
Cause of death, Duck?
Ah, well, organs show signs
of malnutrition and enlargement.
Consistent with exhaustion
and high blood pressure.
A heart attack
is not out of the question.
KHAN: I read about
a South Korean dude
who died from playing video
games for 27 days straight.
- Urban legend.
- DUCKY: No, no, no.
What Mr. Khan is saying
is possible.
Prolonged lack of sleep
and improper nutrition
cause immense stresses
on the body.
So did this guy die while
extreme hacking the servers?
It's inconclusive thus far.
I've estimated the time of death
as late last night
or early this morning.
Krampus called in the threat
at 10:00 a.m. It's not him.
If he was hacking on-site,
he'd have a computer.
- Right.
- It would help ID him.
- In the snow, all night long.
- That needs to be dried out.
- Six to eight hours.
- Yeah, more like 12.
HEIDI: Not a solid-state drive,
it wouldn't take as long.
We can't wait while Krampus
decides when to leak the intel.
This guy's not Krampus.
He works for him. A lackey.
But if we can ID dead guy, we
connect him to Krampus, and--
I mean, not that we care.
- No, never thought you did.
- We're the bad guys, remember?
Even Santa Claus
needs a team of elves.
McGEE:
Another Gibbs rule.
Rule Number 15,
always work as a team.
Okay, more left.
[YELLS]
[GRUNTING]
Oh, come on.
Ah! It's about time.
I love you, McGee.
So I guess this teamwork
thing is out the window?
No way. Working together
is always better.
Then why did Agent Gibbs
leave us down here?
And why won't you
let us into your lab?
Hey, stay in the line of sight.
I'm confused.
Do you trust us or not?
It's like A Christmas Carol.
Scrooge was shown
all the facts,
and what he does with them
is up to him.
So we're Scrooge? We're supposed
to just have a change of heart?
Because we don't know anything.
Can we skip to Christmas future?
If only wishing made it so.
[PHONE BEEPS]
- Another dead body?
- No, it's my sister.
We're coordinating
Christmas presents.
Hey, uh, you never did say how your
dad's doing on his treatments.
Well, chemo worked
until it didn't.
Surgery is our only option now.
Luckily, he's got one this week.
That's why
you didn't wanna do all this.
McGee, you should have said
something.
[SCOFFS]
It's a Christmas miracle.
You're gonna want to see this.
- Are those--?
- New computer monitors.
- How long have they been there?
- This is dated three years ago.
- And it just says "Bullpen."
- Your tax dollars at work.
- Bishop?
- Can't talk, given company.
McGEE: Because Rules 3 and 8
just came into play, Dad.
Rule Number 3, don't believe
what you're told. Double check.
- Rule 8 will save you.
- Never date a co-worker?
Never go anywhere
without your knife.
- Thought that was 9.
- Never take things for granted.
McGEE: It's just occurred to me
that rules Number 3, 8,
36 and 40 are the same thing.
And with two Rule Number 1s
and two Number 3s,
I'm starting to question
that these are honest mistakes.
Is Gibbs making up these rules
as he goes? Do all parents?
So Heidi lied to us, boss.
She was granted an hour
of unsupervised computer use
- for good behavior.
- Unsupervised isn't monitored.
- Pull prison computer records.
- Already did.
Heidi has been using
an anonymous message board.
The prison's site blocker
missed it.
- But I didn't.
- Who'd she talk to?
Well, I used the prison
computers' keylogger
so we only know
what she typed.
- Krampus.
- Heidi played matchmaker.
Hooked him up with her contacts
to coordinate the attack.
- Location?
- More untraceable usernames.
But it does prove
that Heidi knows Krampus.
- She could lead us to him.
- Could, but hasn't.
No, not yet.
[CHRISTMAS MUSIC PLAYING
ON RECORD PLAYER]
McGEE: If you're lost, Dad,
let me recap.
Sensitive intel was stolen
from a downed Internet server
by a hacker named Krampus.
If leaked, national security
would be at risk.
So we brought in
three criminal hackers
to help track down Krampus.
Although
they've done anything but.
We just discovered one
has been in contact with him
and is fully aware of his plot.
Our only advantage is that she
doesn't know we're onto her.
Tony. Miss us already?
You have a call
from your lawyer. Come on.
- Ah, told you he'd check up.
- The rest of you, no.
You're going
to the conference room.
McGEE: Did I accuse you
of making up parenting strategies
as you went along, Dad?
Well, I'm beginning
to understand the feeling.
We were about to trust
a convicted cyber-criminal.
Where's my phone call?
Wait a minute, there is no call
from my lawyer, is there?
Nope. Sit down.
This another ruse?
Yes, it is. But this time,
you'll be in on it.
What are you talking about?
Krampus is still out there,
so we're forced to be creative.
Like making me think
I was about to be murdered
by terrorists at Guantánamo Bay?
It worked.
- So, what, suddenly you trust me?
- Not in the least.
But we did find something
to barter with.
The only thing
you've ever valued.
Money. Sit down.
McGEE: Visitation records show
you've been meeting
with Internet security companies.
You looking to consult
from your prison cell?
There's a lot of money in it.
Plus, I'm bored.
Yeah, well, so are a lot
of other ex-hackers.
And only the trustworthy ones
land contracts.
Oh, I see.
But if I help you now--
We will make phone calls
and put in a good word
at the federal agencies.
So it's hypothetical money.
Wait, just wait, wait.
Wait. God.
Fine. What do I have to do?
- Just do what you've been doing.
- McGEE: Being a pain in the ass.
And flirting with Heidi.
You stole this cell phone
from Agent Bishop,
and you are going to let
Heidi use it to warn Krampus.
- About?
- Us.
- We're going undercover online.
- Oh, God. Finally.
But wait,
so why would she trust me?
- Not think this is some setup?
- Because you're you, that's why.
Deal.
- Hey. I said we have a deal.
- It's on hold.
McGEE: As a team, there are rules
we choose to ignore,
because the benefits promise
to outweigh consequences.
- Number 22 is one of them.
- Rule Number 22.
Never, ever bother Gibbs
in interrogation.
- Working.
- Gibbs.
I know you hate being
interrupted. This is important.
- It better be.
- Gibbs. Hi.
Uh, could I see you a second, boss?
Never interrupt
an interrogation, McGee.
GIBBS:
Abs?
Gibbs, enter. Quickly.
Can't be too careful with
criminals roaming the highlands.
- You two got something?
- We've been working to ID
our server-farm snowman.
Cause of death wasn't simply
from prolonged computer use,
but from a rare disease
called fatal familial insomnia.
Also known as the inability
to fall asleep.
When the disease
first presented itself,
it might've been seen
as a bonus to a hacker.
Until sleeplessness took a toll
on his body and it shut down.
Usually, the patient falls
into a coma and dies.
But in this case,
heart failure got him first.
- You said it was rare.
- Our victim never reported
- he had the disease, but--
- His father did.
Yep. He died when his son Lyle
was 5 years old.
Lyle became a ward
of New Jersey
until he came of age,
and became a web designer
- and a Krampus disciple.
- Notify local police.
They're already at his apartment
collecting computers, cell phones,
and anything to lead us to Krampus,
who, good news,
hasn't leaked any intel,
only because,
bad news,
he's putting it up for bid.
Everyone from TMZ to ISIS
is licking their chops.
- Can't wait for them to pay up.
- The deal with Khan stands?
Unless you give me
something first.
McGEE: I have to admit
that Abby is another example
of a rule often broken
by our team. Rule Number 12.
- Never date a co-worker.
- Hello, Jethro.
- Yeah?
- Yeah.
- He stay at your place?
- Yep.
- You sleep in the coffin?
- I can't believe I slept
- in a coffin.
- Not just slept.
McGEE: But every rule exists
for a reason.
Because it can come back
to bite you, or worse.
I found those nice new monitors
for you.
I thought we'd use them.
How do you read these things?
Don't make us regret
letting you in here.
I regret agreeing to the terms.
BISHOP: Maryland forensic lab posted
a copy of Lyle's hard drive.
- You type like an eighth-grader.
- You smell like horny concrete.
KEVIN: Tony, you can't do that.
TONY: Why not?
If we're creating an undercover
message board alias,
you can't make your username
Serpico73.
- Why not?
- Pacino was a cop.
[PHONE RINGING]
Yeah. That way,
they will never suspect me.
- Girlfriend?
- Sister.
Sarah, listen, I can't talk now.
I'm in the middle of--
Wait, what? When?
Why didn't he tell us?
Well, I can't be there right now.
Talk to him. I have to go.
That didn't sound like
Christmas-present coordination.
- No, it didn't.
- Told you.
Every word these guys say
is a lie.
It's not about presents, okay?
My father canceled his surgery,
and instead of me being there
to convince him otherwise,
I'm stuck here with all of you.
Well, I need a bathroom break.
Agent Gibbs,
may I have a hall pass?
Door's right over there.
- No detours.
- Okay.
- Don't get lost.
- Okay.
Hey. Here's my chance.
Give me the phone.
Our deal. The restrooms are
next to each other. Come on.
- Forget about it.
- Hey, come--
Dude, look, about your dad,
I'm sorry, okay? I am.
But I can do this.
Shh.
What the hell are you doing?
Bathroom break.
- I don't think they saw me.
- What do you want?
Um...
- To make out.
- Ha. Yeah.
What's in it for me?
Hmm...
- Oh.
- Oh.
McGEE: No activity yet.
KEVIN: You made a deal with Khan?
- I think I would've been a better option.
- BOTH: Shh!
Phone's on.
Why is she using the camera?
Is this part of the plan?
Oh, no.
Uh, Boss?
Ew.
- He double-crossed us.
- McGEE: Like I said, Dad,
a lot of things
can come back to bite you.
KAHN:
Hey.
- Gift exchange is over.
- I was just getting started.
Tell me about it.
I need a cold shower.
That wasn't part of our deal.
- You told her?
- Well, like you said, I'm me.
Furlough free time is over.
I want a lawyer.
McGEE: Gibbs's Rule Number 13.
Never involve lawyers.
- Sorry.
- McGEE: Rule Number 42.
Never accept an apology from
someone who sucker-punched you.
Guess that visit to MTAC is out.
- You mad, bro?
- I'm disappointed.
I'm done with all of you.
McGEE: A parent makes the rules
to help.
You can't force kids to follow,
no matter how hard you try.
They have to make
their own choices.
I suppose I owe you an apology
for those times, Dad.
Which is breaking
yet another rule, actually.
Douglas VonDorothy,
a.k.a. Krampus.
- You found him?
- Yes, with Abby.
Our dead guy in autopsy
kept records
of his message board chats
with Krampus.
They gave away personal details.
Hobbies, regional indicators.
Info you could track on social
media to get real names.
Mm-hm. Only one of which had a
criminal record for computer crimes
- and fit what we knew.
- Where is he?
show him in Rice Lake,
Wisconsin.
His parents own a cabin there.
It's cold, but isolated.
- FBI field office in Chicago?
- Make the call.
Let's just hope
he hasn't found a buyer yet.
- Problem, Tim?
- Be specific when you lie.
People that hide online
know that better than anyone.
- Boss, this feels--
- Too easy?
Yeah. If they show up in Wisconsin
and Krampus isn't there,
he'll disappear with the intel.
Hold on. Am I sending
FBI SWAT to Wisconsin?
- Let's ask her.
- Who, Heidi?
- Why would she talk now?
- Show her who she's protecting.
Boss, can you give that
to someone else?
I can't take it anymore.
I said from the beginning
this wasn't gonna work.
It's a waste of time.
These guys are criminals.
They're not worth it.
McGee.
- Rule 51.
- Fifty-one?
What is--?
I wrote it down once.
That's who you're protecting.
Anything you want to tell us
before the FBI get
to Wisconsin and arrest him?
You still don't have
anything else to say?
Kevin, you wanted to help.
Now's your chance.
- Read his record.
- Yes, anything. Finally.
"Douglas VonDorothy:
While not shutting down cities
as Krampus,
uses other usernames
for online stalking.
Gathering personal information
of ex-girlfriends or wives
for the purpose of continued
harassment or slander."
- Revenge porn.
- For hire.
Don't listen.
This is a made-up file.
That's a photo of a guy from HR.
This is just to guilt-trip you.
This man also has a history
of hacking the cell phones
of random high school girls
and holding embarrassing
pictures for ransom
or posting them online.
Most of these are underage.
Did this guy have a mother?
- This keeps going.
- That's enough for now.
This wasn't political
or someone seeking truth.
For once,
the avatar matches the man.
You're protecting a monster.
So what? I thought you got him.
So what?
That's all you have to say?
How can someone be so callous
and cynical at Christmas?
You're a criminal too,
Bob Cratchit.
I'd give anything to make up for it.
You two are just hopeless,
heartless humbugs.
Heidi, listen to me.
You made bad choices.
And you were caught.
You're a criminal.
But not doing the right thing because
you have nothing to lose or gain?
That just makes you
a bad person.
But that's not you, is it?
Kevin's wrong.
I was wrong.
It's okay to admit it.
McGEE:
Rule Number 51.
Sometimes you're wrong, Heidi.
Believe it or not, before all of this,
I was a good teacher.
I taught my students
right and wrong.
To clean up their messes.
Krampus isn't in Wisconsin.
But you know where he is,
don't you?
Mm-hm.
Left a mess
I have to clean up now.
McGEE: That happens
to be Rule Number 45.
And what I slowly realized
Gibbs' rules are all about.
What they're meant to prevent.
Messes, problems,
screw-ups, mistakes.
But when messes
and problems happen,
the rules are also there
to protect us.
And because each of us
live by those rules,
we know
that no matter how many we break,
no matter how much
we screw up,
there will be someone
to save us.
Which is what Christmas
is about too.
Someone giving us
a second chance.
Like a parent. A father.
FBI raided the Jacksonville
retirement community
where known hacker
Douglas VonDorothy lived
with his elderly parents
under false names.
VonDorothy was arrested
and taken into custody.
- I told you I'd get into MTAC.
- There he is.
WOMAN: Cyber division
has recovered hard drives
thought to contain
vital security intel
stolen from Washington, D.C.
Internet servers
late last night.
[WHISTLES]
Nice, Tim.
McGEE: The case helped me
recognize all the hard, thankless work
you put in over the years.
That while I've learned a lot
from Gibbs,
it's only possible
because of how I was raised.
By you.
You may not have numbered
your rules, Dad,
but they were meant
to teach the same lessons.
You taught me
to always be prepared.
- Always stand up for yourself.
- Then go. I'm staying.
McGEE:
But if you're wrong, admit it.
I'm still leaving out a few,
but maybe hitting them all
was too lofty a goal.
Dad, how can you say that?
It's not about you sometimes.
Oh, I'm stubborn? Gee,
I wonder who I get that from?
[SIGHS]
No, we have
the whole week off.
There are other agents here,
Dad.
Look, I have to go.
I'll see you in an hour.
Notice anything different,
McGeek?
We installed
the new computer monitors.
- You touched my desk?
- It was their idea.
- We wanted to thank you.
- What? Don't say that out loud.
No, this monitor
should be more to the left and--
To the van. Nobody needs
to see this part of Tim McGee.
- Come on, IT Kevin.
- McGEE: You didn't bundle the cables?
What are you still doing here,
McGee?
Your dad made time for you.
Return the favor.
McGEE: Postponing that surgery
was you doing everything you could
to make sure we had
this last holiday week together.
Not in the hospital room,
but as a family. All of us.
Why you couldn't have
just said that is beyond me.
But I guess I'm the one
who has to write a letter.
Communication
was never our strong suit, Dad.
And we haven't always seen
eye-to-eye.
But your rules,
my breaking of them,
our ensuing arguments,
the resulting punishments--
[KNOCKING ON DOOR]
Uh, people will be arriving, Tim.
- Just another minute, please?
- Sure.
Every moment with you,
from growing up
to these last few days,
it meant something to me.
I've heard it takes a man
to make a man.
Well, you've helped make me one.
Before I say goodbye, Dad,
I just wanna say thank you.
For everything.
Merry Christmas, Dad.
I love you.
[SOBBING]