The National Cohesion and Integration Commission (NCIC) has dismissed claims that Gatundu South MP Moses Kuria's Facebook account could have been hacked.
Instead, the commission told the court that investigations indicate Mr Kuria was responsible for the inciteful posts.
The commission through Martin Luther, who was working as a digital forensic investigator at the time, told the court that the cyber space monitoring and evaluation department had established that the account was being controlled by Kuria after the Gikomba terrorist raid.
During Thursday's hearing, Mr Luther, who was the second witness to testify in the case, said the decision to prosecute Kuria was arrived at after the collection of evidence, which included Kuria's admission of the claims of incitement when he made a public apology before the media.
The next hearing is on October 21.