Skip to main content

NCIS season 23 episode 17 recap: LL Cool J returns as Sam Hanna

LL Cool J's Sam Hanna made his return to NCIS Season 23, episode 17 as Kasie worked on an upgrade to the NCIS servers.
“REBOOT.” - CBS Original Series NCIS, scheduled to air TUESDAY, APRIL 21 (8:00 PM ET/PT) Pictured : Gary Cole as Alden Parker, LL COOL J as Sam Hanna and Brian Dietzen as Jimmy Palmer Photo: Robert Voets/CBS ©2026 CBS Broadcasting, Inc. All Rights Reserved.
“REBOOT.” - CBS Original Series NCIS, scheduled to air TUESDAY, APRIL 21 (8:00 PM ET/PT) Pictured : Gary Cole as Alden Parker, LL COOL J as Sam Hanna and Brian Dietzen as Jimmy Palmer Photo: Robert Voets/CBS ©2026 CBS Broadcasting, Inc. All Rights Reserved.

NCIS season 23, episode 17 was essentially a bottle episode that took place within the walls of the office with the bulk of the team away for a conference. Kasie was in the process of maintaining an upgrade of the NCIS servers, and she had obtained the assistance of three other tech assistants.

Unfortunately, things went awry fast as one of them, Daryl, stopped communicating after things went dark. Parker, who had come back early, went with Jimmy to find him and discovered he had died of some sort of head wound. It did look like someone had killed him, but they weren’t sure why.

Reboot
“REBOOT.” - CBS Original Series NCIS, scheduled to air TUESDAY, APRIL 21 (8:00 PM ET/PT) Pictured (L-R): Diona Reasonover as Kasie Hines. Photo: Robert Voets/CBS ©2026 CBS Broadcasting, Inc. All Rights Reserved.

Parker, Jimmy, and Sam try to help Kasie after a server upgrade is compromised

Their janitor, Tommy, was also in the building and told them he heard noises in Ducky’s old office. They went over to find that Agent Sam Hanna had arrived to take a nap upon having a layover in Dubai.

As happy as the three of them were to see Sam, they still had to figure out what happened to Daryl. The other techs didn’t know what happened, thinking Daryl just had food poisoning. They all had to be discreet in questioning them, but it appeared none of them were involved in hurting him.

Things only got more complicated when there was an entirely new blackout and an old monitor overheated, which could endanger the server upgrade. Sam and Parker were able to find an old one down in the evidence locker, while Jimmy went to retrieve Kasie’s laptop. Unfortunately, he got hit in the head just as someone went to Kasie’s laptop to download something off of it.

It turned out to be Tommy, who was forced into getting information for someone who had his family held hostage. Tommy had killed Daryl, but it appeared to be accidental since Daryl was trying to stop him from taking the laptop, and he hit him with his elbow, causing Daryl to fall.

Even though the server upgrade was considered a success, Kasie realized something else was stolen. She had built a program called EDNA, and that was completely missing from her files. What exactly is EDNA? The episode itself didn’t explain, as we were left on a cliffhanger. However, the promo did provide some clues, and it looks like whatever it is, its absence will cause complications for Kasie.

Since the system upgrade was kept such a secret and moved to being done at 1:00 in the morning, only someone who was involved in knowing the schedule would know about it. We met the Deputy Chief of Cyber Security, David Barbado, at the beginning of the episode when he talked to Kasie about the importance of the upgrade’s security. But could he have been secretly involved in stealing the program?

The next episode should give fans an idea of what the program is, which could apparently affect national security, given how valuable it was to steal and blackmail the janitor into stealing it. Luckily, we only have to wait until Tuesday, April 29, to find out.

NCIS airs Tuesdays on CBS at 8/7c.

Add us as a preferred source on Google

Loading recommendations... Please wait while we load personalized content recommendations