Much of the ransom has been recovered from the hackers that forced the shutdown of the Colonial Pipeline. How did the Justice Department turn the tables?