Seems like you'd want to subpoena source code or gmail history or something like that. Not much interesting in an office these days.
I assume that they have opened a formal investigation and are now going to the office to collect/perloin evidence before it's destroyed.
Most FAANG companies have training specifically for this. I assume X doesn't anymore, because they are cool and edgy, and staff training is for the woke.
mine had a scene where some bro tried to organise the resistance. A voice over told us that he was arrested for blocking a legal investigation and was liable for being fired due to reputational damage.
X's training might be like you described, but everywhere else that is vaguely beholden to law and order would be opposite.