Police have sealed off Guango estate in Ruaka, where the vehicle said to have been used in the Riverside attack is said to have been spotted several times.
According to a local daily, One of the terrorists is believed to have been staying in house No E9 in Guango Estate.
Neighbours are said to have called the police after recognising his car that was used in the attack KCN.
The Star has reported that Anti-Terrorism Police Unit has been camping at the site.
A guard who spoke to the local daily on condition of anonymity said the owner of the car was jovial.
“He used to wear T-shirts and greet us,” he said.
The guard said the owner of the car moved into the estate on March 21 last year.
He had a wife but the guard did not see any child.
There are more than 200 houses in the area that is served by rough road.
The rent in the area goes for between Sh30,000.
Houses in the area are sold for about Sh9 million.
There are more than 200 houses in the area that is served by rough road.
Security agencies took over the area as neighbours reported hearing a commotion from one of the houses.
Media has not been allowed near the scene.
The terrorist is from Kiambu and converted to Islam, changing his name to Faruk.
His friends are known and are being pursued for interrogation.
Two women are said to have been arrested inside the house and explosives already recovered from his house.
Earlier, President Uhuru Kenyatta said the operation at 14 Riverside Drive is over and 14 lives were lost during the attack.
Addressing the nation on Wednesday, Uhuru said the security operation ended at about 9.30am.