But your expectations from the crypto forensic team are probably too high. Cryptocurrencies normally are very unlikely to be "returned" if a hacker had access to your private key and was able to transfer the cryptos to another address. Most what they can do is to help the police to investigate.
It depends on where the funds came to the OP's metamask wallet. If, for example, they came from one of the DEX or no-kyc exchanges, even if a "hacker" was doxed in some way, he can always claim that it was his wallet because he had private keys. It can be very difficult to prove ownership of coins.