I think that's probably a question for law enforcement and intelligence agencies. Certainly the work at Tech Against Terrorism isn't focused on identifying individuals, but rather supporting tech platforms in reducing their activity online. Where appropriate and where there is a realistic threat to life, we ensure that the alert is sent to the relevant authorities, including in Canada.
As to the attribution, I think that's probably a question for law enforcement in terms of the measures that they may have and the mechanisms they have available under Canadian law in order to conduct surveillance and carry out intelligence operations.