So you’re technically correct, operationally incorrect. When CSAM is detected there is also the possibility of new, unhashed, CSAM being found amongst the suspects other files.