Only a handful of countries have the capability to carry out such an attack. The place where the attack occurred is where NATO was just doing naval exercises and US had ships present. Putting two and two together here is not hard. Any definitive proof here may never come, and NATO is already refusing Russia being part of the investigation. Unless all parties involved are allowed to investigate then the whole investigation is a sham.