| From: ' |
|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| (USANYS) [Contractor)" <
<
To:" |
| Subject: FW: Epstein search warrant documents |
| Date: Mon, 13 Jul 2020 13:55:05 +0000 |
| Attachments: EpsteinNYEvidence.xlsx |
| From:
(NY) (FBI) <
>
Sent: Monday, July 13, 2020 9:07 AM
(USANYS) [Contractor] <
>
To:
Subject: RE: Epstein search warrant documents
See attached. |
| NYO CART Coordinator
Senior Forensic Examiner
(office)
(cell) |
| (USANYS) [Contractor] [mailto:
From:
Sent: Monday, July 13, 2020 8:59 AM
. (NY) (FBI) <
To:
>
Subject: RE: Epstein search warrant documents |
| Hello |
| I just got the hard drive and I have some questions about what is on the hard drive. Do you have a moment to talk? |
| Thank you. |
| |
| (NY) (FBI) <
>
From:
Sent: Wednesday, July 8, 202012:42 PM
(USANYS) [Contractor] <
>
To:
Subject: RE: Epstein search warrant documents |
| Thanks |
| NY CART Coordinator
Senior Forensic Examiner
cell
desk |
| On Jul 8, 2020 12:41 PM, "
(USANYS) [Contractor]" <
wrote: |
As soon as I have the hard drive I will reach out to you.
Thanks.
| From:
(NY) (FBI) <
>
Sent: Wednesday, July 8, 2020 12:38 PM
(USANYS) [Contractor] <
To:
>
Subject: RE: Epstein search warrant documents |
|--------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Thats what I hear,they are going to get it to you. |
| NY CART Coordinator
Senior Forensic Examiner
cell
desk |
| On Jul 8, 2020 12:33 PM, "
(USANYS) [Contractor]" <
wrote:
I am assuming you are sending the data to One Saint Andrews correct? |
| (NY) (FBI) <
From:
>
Sent: Wednesday, July 8, 2020 12:31 PM
(USANYS) [Contractor] <
>
To:
Subject: RE: Epstein search warrant documents |
| The drive will begin its journey to you in minutes. Reach out when you get it to go over stuff so you aren't
looking at it like a dog looking at a tuba. |
| NY CART Coordinator
Senior Forensic Examiner
cell
desk |
| On Jul 7, 2020 5:34 PM, "
(USANYS) [Contractor]"
wrote:
Hello |
| Our office is not open and I am still working from home. Is it possible to have this data sent to my home? |
| Thank you. |
| |
| (NY) (FBI) c.a.
From:
Sent: Tuesday, July 7, 2020 5:14 PM
(USANYS) [Contractor]
To:
4
. (NY) (FBI) <->;
Cc:
(USANYS) |
EFTA00030393
>; (NY) (FBI)
### `• "; (USANYS) Subject: RE: Epstein search warrant documents
Everything with the exception of a couple of items are ready. I will get you an actual number before I send it over. We can send it over tomorrow. There will be ReadMe files included so it will be easy to see where the items came from. I am a little worried about how the e-mail will present. While looking through on a spot check, the attachments are not connected to the e-mails in the forensic tool. I believe it is a function of the e-mail client they were using to begin with. I know that the attachments are a concern of yours. We may have to massage things a bit to get it right. Now that we are working every day, and everything has been processed, it shouldn't be too big a deal. So far the export is about 350 GB. It copies slowly because it is a ton of pretty small files. You are getting the whole ball of wax, here, Macs, Windows boxes, loose media, etc. There will be a few iPhone and iPad reports, but unsure if I can get you those tomorrow as they very often take a LONG time to copy. Again, lots of small files. If not tomorrow, the next day.
Are you around tomorrow? Reach out to me when you get the production so we can correct any problems we might encounter. Thanks.
| NYO CART Coordinator | | | | |
|--------------------------|------------------------------------------------------------------------------------|----------|-----------------------|--|
| Senior Forensic Examiner | | | | |
| | (office) | | | |
| | (cell) | | | |
| | | | | |
| From: | ) | | | |
| | Sent: Tuesday, July 07, 2020 3:42 PM | | | |
| To: | . (NY) (FBI) I>: (USANYS) [Contractor]
< | >; | (USANYS) [Contractor] .ic | > |
| Cc: | (USANYS) < | | . (NY) (FBI) < | |
| | >; | | | (NY) (FBI) |
Checking in for the estimate of when we can expect to get all the USVI materials?
# thanks,
| From: | | | | |
|-------|-----------------------------------|------------|-------------------------|------------|
| | Sent: Monday, June 29, 2020 13:00 | | | |
| To: | (NY) (FBI) < | >; | (USANYS) [Contractor] < | |
| Cc: | (USANYS) | | (NY) (FBI) <—>; | |
| | | | | (NY) (FBI) |
| | >; | (USANYS) < | | |
| | | | | |
Subject: RE: Epstein search warrant documents
Okay thanks — good luck with the cardiologist! And if you can let us know tomorrow that would be great. Thanks again.
Subject: RE: Epstein search warrant documents
When I'm in the office tomorrow, I will be better able to estimate. I'm at my cardiologist right now.
NY CART Coordinator Senior Forensic Examiner cell desk On Jun 29, 2020 12:56 PM, ' 1' < wrote: Great, thanks. Is there even a rough estimate of when we will get the USVI materials? Or an estimate of when you'll be able to see how many items to export, so we'll have a better sense of when we'll get those? From: (NY) (FBI) < > Sent: Monday, June 29, 2020 12:55 To: (USANYS) [Contractor] a::•;
NY CART Coordinator Senior Forensic Examiner cell
desk
# On Jun 29, 2020 12:52 PM,' < > wrote:
Okay, and I'm sorry to ask again, but to make sure, in this production, you're sending us new versions of what you previously sent?
| From: | (NY) (FBI) < | > | | |
|-----------------------------------|-----------------------|---|-----------------|------------|
| Sent: Monday, June 29, 2020 12:50 | | | | |
| To: | (USANYS) [Contractor] | | | |
| | | | | |
| Cc: | (USANYS) | | (NY) (FBI) <->; | |
| c | >; | | | (NY) (FBI) |
| c | (USANYS)<
>; | | > | |
# Subject: RE: Epstein search warrant documents
You are getting both NY and USVI. The biggest stumbling block are the newer Mac items that are in APFS (there are a bunch from the Island,) so it is difficult to estimate how long those will take until I see how many items I have to export.
NY CART Coordinator Senior Forensic Examiner cell desk
thanks,
On Jun 29, 2020 12:40 PM,' < > wrote: Okay thanks, and just to clarify, a few days to finalize the New York materials, and then what about the USVI materials? I think that is quite a bit more. Just looking for an estimated completion date for everything.
And on my other question — does this mean you're giving us a new, complete copy of everything from both NY and USVI?
# From: (NY) (FBI) < > Sent: Monday, June 29, 2020 12:34 To: (USANYS) [Contractor] 4 Cc: (USANYS) . (NY) (FBI) < (USANYS) >; (NY) (FBI)
Subject: RE: Epstein search warrant documents
I am in the process of exporting the materials (documents, spreadsheets, emails, etc) for your review as per my discussions with . Most of the NY stuff is done, just Mac items left. This might take a few days as 1 item in particular has over 500,000 emails. We will be able to provide discovery once Defense Council has provided drives for us to copy items over to. This goes quicker as there is no processing involved. I'll let you know when everything is complete.
| NY CART Coordinator | |
|-----------------------------|----------|
| Senior Forensic Examiner | |
| cell | |
| desk | |
| | |
| On Jun 29, 2020 11:03 AM, " | > wrote: |
Following up on this, I understand from that she was able to provide you with a 12 TB drive last week —could you please let us know when we will be able to get the materials? I expect a judge will ask us about discovery as early as this week.
Also, the related critical question that I don't think we have clarity on is whether you're giving us a copy of everything that was collected (including reproducing the materials that you previously gave us, but which are not searchable), or have you and I= figured out a way to categorize the prior productions so they're useful for us? We would strongly prefer to just get everything at once in a usable format, but please let us know if you expect to produce materials differently than that.
# thanks,
| From: | (NY) (FBI) < | > | | | |
|-----------------------------------|----------------------------------------------------------------------------------------|----------|----|--------------|------------|
| Sent: Friday, June 19, 2020 13:14 | | | | | |
| To: | (USANYS) [Contractor] < | | >; | | |
| | | | | | |
| Cc: | (USANYS) > (NY) (FBI) < >;
(NY) (FBI) < | > | | |
|------------------------------------|------------------|---|-----------------------|
| Sent: Thursday, May 14, 2020 15:54 | | | |
| To: | >; | | (USANYS) [Contractor) |
| > | | | |
| Cc:
< | >; | | |
| (NY) (FBI) <
>; | . (NY) (FBI) .z: | > | |
| | | | |
Subject: Re: Epstein search warrant documents
Here is The listing of all the evidence gathered in NY that I have. I added some columns to guide you to the unique numbers CART NY uses fro their evidence. The template wasn't a slam dunk over, so I did what I could to convey the information. If you are confused by anything, please let me know. In the column for approximate size, it is in GB, totaled at the bottom and converted to TB. In the materials contained column, I put what load file group the data was transferred over in (Mac, Windows, Loose Media, IDE, or Blacklight) If there is no entry in that column, that data has yet to be transferred. There are 2 Macs and a DVR you don't have as well as an iPhone and an iPad. IF the descriptions are a bit light, let me know and I'll do what I can to beef them up. I will get you the Island stuff tomorrow.
| FBI NY CART Coordinator | |
|----------------------------------------|-----------------------|
| Senior Examiner | |
| | |
| From: | |
| Sent: Wednesday, May 13, 2020 12:25 PM | |
| . (NY) (FBI) .ce
To: | (USANYS) [Contractor] |
EFTA00030400
Cc: e; (NY) (FBI) < >; (NY) (FBI) < >
Subject: RE: Epstein search warrant documents
Respectfully, I think there are some miscommunications here — all we have asked is to receive the materials in a format such that we can view them using a system we have access to. We're not able to get web-enabled access through any FBI tool, so we asked for the materials to be transferred in a loadable format so we could put them on Relativity, which both we and the agents can access. We're required to have the files in a format that we can produce them to defense counsel. I've done that in many other cases and it hasn't previously been an issue. My understanding from is that the best way to do it now is just for us (the U.S. Attorney's Office) to get the original files, which our vendor will process—by which I just mean converting into file formats that are loadable onto Relativity. It doesn't really have anything to do with the taint review—we have to have access to the docs in our systems for discovery purposes.
And we were happy to get the materials as they were processed, but when we received the 1.1 million documents earlier this year, they were in a format that wasn't usable for the reasons described in the email I sent on March 9. Again, I understand from that the best way forward is to just get copies of the materials in their original formats, which I understand will be segregated and designated by device. That should work for usl I was just trying to understand the approach, as well as the timeline.
thanks,
| From:
(NY) (FBI) < | => | | |
|-----------------------------------------------|----------------|-----------------------|--|
| Sent: Tuesday, May 12, 2020 13:03 | | | |
| To: | | (USANYS) [Contractor) | |
| | | | |
| S.;
Cc: | | | |
| (NY) (FBI) <
>; | . (NY) (FBI) < | > | |
| Subject: Re: Epstein search warrant documents | | | |
Just to be clear. The US Attorney's Office (or it's contractors) are not "processing" anything. You are taking files that I will be extracting from processed evidence and putting them into an E-Discovery tool (Relativity) to do a taint review.
Relativity is NOT a forensic tool. It is incapable of dealing with many things that are found forensically on a computer like free space, slack space, and system files to name a few. When we started this, and you insisted you do the taint review in Relativity, I warned you that it was adding months worth of work on top of what was already done, and that Relativity was incapable of viewing everything. You insisted we do it this way. So now
and I have come up with a way to fit this round peg into this square hole. We will get it done.
Sorry it has taken so long, but we are talking about terabytes worth of data over multiple forms of digital evidence. Phones, tablets, loose media, cameras, DVRs, servers, laptops, and desktop computers. We have gotten past encryption on multiple devices. When we review devices on such large cases, we usually do it piece by piece as things are processed, I was unaware that you didn't want to review as things were processed, that you wanted to do it "all at once", so that added to the delay. Sorry for that. Just a differentiation of methodology I suppose.
and I feel confident that the method we have come up with will be more consistent and preserve the attribution of files to devices and links of e-mails to attachments that the load file generation that I did a while back was lacking.
Okay, so just to check, you both think that there is not a need to do a test run? You're both comfortable with just basically sending us copies of everything? I don't totally understand why we couldn't have done that eight months ago, but regardless of the passage of time, I want to make sure we understand so we can report to our supervisors. I assume that means that we (at the U.S. Attorney's Office and through contractors) will therefore need to do all the processing ourselves, correct? And thanks again to you both.
| E>
From:
(NY) (FBI) <
Sent: Tuesday, May 12, 2020 11:30
(USANYS) [Contractor]
To:
Cc:
Subject: RE: Epstein search warrant documents
Like
particular device. Problem now is how to get the data to
since he is teleworking. |
| NY CART Coordinator
Senior Forensic Examiner
cell
desk |
| On May 12, 2020 11:15 AM, "
wrote:
<
I have no doubt you do, but can you please tell us what that plan is? Thanks! |
| From:
(NY) (FBI) <
>
Sent: Tuesday, May 12, 202011:11
(USANYS) [Contractor] <
To:
>;
Cc:
Subject: RE: Epstein search warrant documents |
| I will use the spreadsheet, no problem.
and I ironed out all the details. We've got a good plan moving
forward that will meet your needs. |
| NY CART Coordinator |
|------------------------------------------------------------------------------------------------------------------|
| Senior Forensic Examiner |
| cell |
| desk |
| |
| On May 12, 2020 10:34 AM, "
wrote:
)" < |
| it would be very helpful for us if you could please use the attached spreadsheet in transmitting that info so we |
make sure we get all the info we need. I think you had previously sent us a list of certain information that unfortunately wasn't helpful for us, so we want to make sure we're all on the same page.
In terms of data transfer, are you just sending a literal copy of all the raw data, and we'll process and upload it on our end? I ask to make sure we don't lose any searchability — when FBI sent versions before, it had already been processed. I think what we talked about on the phone a month ago was getting, for example, data from one device to make sure it transfers correctly, before sending over literally everything — is that still the plan?
thanks,
# From: (USANYS) [Contractor] Sent: Tuesday, May 12, 2020 10:27 To: Cc: . (NY) (FBI) < > Subject: RE: Epstein search warrant documents
Hello
Me and just finished our phone call regarding the data. will put together a list of the all of the data and where the data was collected. I will work to send some hard drives to so he can begin to copy the data and send it to us. I will need to figure out a way to get the data off of the hard drives.
Please let us know if there are any questions.
Thank you.
# From: ) c Sent: Friday, May 8, 2020 2:15 PM To: . (NY) (FBI) (USANYS) (NY) (FBI) <->; (USANYS)< > Cc: (USANYS) [Contractor] < >; (FBI) < 'c >; ) Sent: Friday, May 08, 2020 14:14
Subject: RE: Epstein search warrant documents
There has been talk of us returning to normal soon, so I don't think it will effect the timeline I initially gave you. If it does, I'll let you know.
Understood, thanks—it will be great to get that list on Thursday. As a refresh, the info we are looking for is in the attached spreadsheet template.
On the returns themselves, do the changes you mentioned mean that the estimate of a month from now for complete transmission of the search warrant returns is no longer likely? If so could you please let us know what the current estimate would be, so we can factor that in? Thanks very much.
| From: | (NY) (FBI)