A change came over Tashfeen Malik two or three years ago. She started dressing more conservatively, wearing a scarf that covered nearly her entire face, and became more devout in her Muslim faith, according to some who knew her in Pakistan.
But her path from there to the bloody events of this past week — when she and her husband slaughtered 14 people in a commando-style shooting rampage at a holiday luncheon — remains a mystery, with FBI officials, family lawyers and others saying they knew little about the 29-year-old Malik before the explosion of violence.
As the FBI announced Friday that it is investigating the massacre as a terrorist attack, law enforcement authorities and others offered evidence that Malik had become radicalized at some point and had shared her beliefs online.
A U.S. law enforcement official said Malik used a Facebook alias to pledge her allegiance to the Islamic State group and its leader just before the shootings.
And a Facebook official said Malik praised Islamic State in a post at 11 a.m. Wednesday, around the very moment the couple stormed a social service center where her husband's co-workers from San Bernardino County's health department had gathered.
Hours later, she and her American-born husband, Syed Farook, 28, were killed in an SUV in a fierce shootout with police.
FBI Director James Comey would not discuss whether anyone affiliated with Islamic State communicated back with Malik, but he said there was no indication yet that the couple was part of a larger cell or was directed by a foreign terror organization.
If the rampage is proved to be terrorism, it would be the deadliest attack by Islamic extremists on American soil since 9/11.
Lawyers for Farook's mother and three siblings described Malik as "just a housewife" who was quiet like her husband and strictly followed Muslim custom. She wore traditional clothing that covered her face so her male relatives didn't even know what she looked like, according to the lawyers.
Malik arrived in the U.S. in 2014 on a Pakistani passport and a fiancee visa but had spent extended periods of time in Saudi Arabia. Farook, a restaurant inspector for the county, was born in Chicago to Pakistani parents and raised in Southern California. The couple had a 6-month-old daughter, now in the care of social service workers.
Malik started studying pharmacy at Bahauddin Zakariya University in the Pakistani city of Multan in 2012, said the university's vice chancellor, Tahir Amin. It was not immediately clear whether she graduated.
A maid who worked in the Multan home where Malik lived said Malik would travel back to Saudi Arabia to be with her family when school was out. During her time in Multan, her style of dress became more conservative over time, the maid said.
The maid said Malik initially wore a scarf that covered her head but not her face. A year before she got married, she started to dress more conservatively and began wearing a scarf that covered all but her nose and eyes, the maid said. The maid spoke on condition of anonymity because did not want to jeopardize her employment with the family.
A relative of Malik's in Pakistan likewise said the young woman apparently became a more devoted follower of the Muslim faith in the past few years.
Hifza Batool told The Associated Press on Saturday that other relatives have said that Malik, who was her step-niece, used to wear Western clothes but began wearing the hijab head covering or the all-covering burqa donned by conservative Muslim women about three years ago.
"I recently heard it from relatives that she has become a religious person and she often tells people to live according to the teachings of Islam," said Batool, a teacher who lives in Karor Lal Esan, about 280 miles southwest of the Pakistani capital of Islamabad.
The Farook family attorneys, Chesley and Mohammad Abuershaid, said none of his relatives had any indication either Farook or his wife held extremist views.
"If the most evidence there is to any affiliation is a Facebook account under another person's name ... then that's hardly anything at all," Chesley said.
He and Abuershaid said the family was shocked by the attack and mourns for the victims. They cautioned against rushing to judgment on their motivations.
An Islamic State-affiliated news service called Malik and Farook "supporters" of their Islamist cause but stopped short of claiming responsibility for the attack.
The U.S. official and Facebook figure who discussed Malik's postings spoke on condition of anonymity because they were not authorized to talk about the matter publicly.
The Facebook official said the company discovered Wednesday's post the next day, removed the profile from public view and reported its contents to law enforcement.
Farook went to the Dar Al Uloom Al Islamiyah of America mosque in San Bernardino every day but abruptly stopped coming three weeks ago. While many members said they knew Farook and described him as quiet and very studious, "no one knows anything about his wife," said Mahmood Nadvi, son of the mosque's founder.
Law enforcement officials have long warned that Americans acting in sympathy with Islamic extremists — though not on direct orders — could launch an attack inside the U.S. The Islamic State in particular has urged sympathizers worldwide to commit violence in their countries.
Since March 2014, 71 people have been charged in the U.S. in connection with supporting IS, including 56 this year, according to a recent report from the George Washington University Program on Extremism. Though most are men, "women are taking an increasingly prominent role in the jihadist world," the report said.