How Internet monitoring sparked a CSIS investigation into a suspected homegrown