All Details

Case Details

Contact Details

Case Assets

Case Collection

Evidence Details

Case Photographs

Case Disposal

Forensic Hardware and Software

0453

Report Produced : 02/21/2020 12:22:37

Produced By :

Forensic Hardware and Software

0453

Report Produced : 02/21/2020 12:22:37

Produced By :

Case Details



<table border="1"><tr><td>Case Reference</td></tr><tr><td>IDMS Reference</td></tr><tr><td>Examiner</td></tr><tr><td>Case Service Level</td></tr><tr><td>Analysis Type</td></tr><tr><td>Case Classification Level</td></tr><tr><td>Service Level</td></tr><tr><td>Open Date/Time</td></tr><tr><td>Due Date/Time</td></tr><tr><td>Case Status</td></tr><tr><td>Contact Name</td></tr><tr><td>Assigned Staff Member Name</td></tr><tr><td>Record Status</td></tr></table>



0453

2019-010614



<table border="1"><tr><td>PRIORITY</td></tr><tr><td>False Statements</td></tr><tr><td>UNCLASSIFIED</td></tr><tr><td>30 Days</td></tr><tr><td>12/12/2019 23:30:58(-0500)</td></tr><tr><td>01/11/2020 23:59:59(-0500)</td></tr><tr><td>Open</td></tr></table>

Case Background

Request to analyze three BOP issued cell phones surrounding the Epstein suicide and investigation into staff failure to do proper rounds and falsification of documents.

Background Attachment(s)

***Phones were not seized as evidence, no collection, no disposal, no ECDs. All phones manually reviewed on site at BOP and returned to users.***

Policy Memo 2019-02 re DOJ Order 2740.1A.pdf

Manual Phone Review - notes and photos.docx

<table border="1"><tr><td colspan="2">Technical Review</td></tr><tr><td>Technical Review</td><td>Yes</td></tr><tr><td>Appropriate examinations have been performed to address request</td><td>Yes</td></tr><tr><td>Report is clear and understandable</td><td>Yes</td></tr><tr><td>The procedures performed were adequately documented and</td><td>Yes</td></tr></table>

EFTA00087806

<table border="1"><tr><td colspan="2">forensically sound</td></tr><tr><td>Exam documentation was sufficiently detailed to enable reproduction of the results</td><td>Yes</td></tr><tr><td>The interpretations and conclusions of the examiner were reasonable</td><td>Yes</td></tr><tr><td>Report is consistent with the examination documentation</td><td>Yes</td></tr><tr><td>Results media has been spot checked</td><td>N/A</td></tr><tr><td>Examiner performing review</td><td>SA</td></tr><tr><td>Date of review</td><td>02/13/2020</td></tr><tr><td>Contact Details</td><td></td></tr></table>

<table border="1"><tr><td>Product Name</td><td>iPhone</td></tr><tr><td>Case Process</td><td>Photos of devices and screenshots</td></tr><tr><td>Tracked Asset</td><td>No</td></tr><tr><td>Asset Type</td><td>Hardware</td></tr><tr><td>Case Collection</td><td></td></tr></table>

<table border="1"><tr><td>Evidence Reference</td><td>0001</td></tr><tr><td>Evidence Type</td><td>PDA/Smart Phone</td></tr><tr><td>Logged In Date/Time</td><td>02/12/2020 12:07:23(-0500)</td></tr><tr><td>Storage Location</td><td>Disposed</td></tr><tr><td>Priority</td><td>N/A</td></tr><tr><td>Description</td><td>BOP issued Samsung Galaxy S9-</td></tr><tr><td>Property Number</td><td>0214207677</td></tr><tr><td>Seized Date/Time</td><td>08/22/2019 09:05:26(-0500)</td></tr><tr><td>Seized By/Produced By</td><td></td></tr><tr><td>Powered Off Time</td><td>00:00:00(+0000)</td></tr><tr><td>Processing Result</td><td>N/A</td></tr><tr><td>Archived</td><td>No</td></tr><tr><td>Notes</td><td>Manual review only for messages related to job card and MicroSD not analyzed.</td></tr></table>



EFTA00087807


<table><thead><tr><th>Information</th><th>Description</th></tr></thead><tbody><tr><td>Start Date/Time</td><td>08/22/2019 09:00:00 (-0500)</td></tr><tr><td>End Date/Time</td><td>08/22/2019 09:20:00 (-0500)</td></tr><tr><td>Conducted By (Name)</td><td></td></tr><tr><td>Manufacturer</td><td>Samsung</td></tr><tr><td>Model</td><td>Galaxy S9 SM-G960U</td></tr><tr><td>Serial Number</td><td>R58M21CC8LB</td></tr><tr><td>IMEI Label</td><td>355028093551622</td></tr><tr><td>Handset Type</td><td>Touch Screen</td></tr><tr><td>Handset Colour</td><td>Black</td></tr><tr><td>PIN/Security Code Locked</td><td>No</td></tr><tr><td>Damaged</td><td>No</td></tr><tr><td>Battery Flat</td><td>No</td></tr><tr><td>Capacity Value</td><td>0.00 Bytes</td></tr><tr><td>Included SIM Card</td><td>No</td></tr><tr><td>Included Memory Card</td><td>No</td></tr><tr><td>Accessories</td><td>No</td></tr><tr><td>Attachment(s)</td><td>IMG_0110.JPG</td></tr><tr><td>Imaging Details</td><td></td></tr><tr><td>Start Date/Time</td><td>01/01/2001 09:05:00 (-0500)</td></tr><tr><td>End Date/Time</td><td>08/22/2019 09:20:00 (-0500)</td></tr><tr><td>Conducted By (Name)</td><td></td></tr><tr><td>Primary Extraction Software</td><td>Manual Review</td></tr><tr><td>Engineering Card Created</td><td>No</td></tr><tr><td>SMS Messages</td><td>1</td></tr><tr><td>Notes</td><td>Manual review - 1 message of potential relevancy captured via screenshot.</td></tr><tr><td>Evidence Reference</td><td>0002</td></tr><tr><td>Evidence Type</td><td>PDA/Smart Phone</td></tr><tr><td>Logged In</td><td>02/12/2020 12:11:20 (-0500)</td></tr><tr><td>Date/Time</td><td></td></tr><tr><td>Storage Location</td><td>Disposed</td></tr><tr><td>Priority</td><td>N/A</td></tr><tr><td>Description</td><td>BOP Samsung Galaxy S9 issued to</td></tr><tr><td>Property Number</td><td>0214 207672</td></tr><tr><td>Seized Date/Time</td><td>08/22/2019 09:15:07 (-0500)</td></tr><tr><td>Seized By/Produced By</td><td></td></tr><tr><td>Powered Off Time</td><td>00:00:00 (+0000)</td></tr><tr><td>Processing Result</td><td>N/A</td></tr><tr><td>Archived</td><td>No</td></tr><tr><td>Notes</td><td>Manual review only for messages related to job performance failure/Epstein suicide; SIM card and MicroSD not analyzed.</td></tr><tr><td>Pre-Imaging Details</td><td></td></tr><tr><td>Start Date/Time</td><td>08/22/2019 09:15:00 (-0500)</td></tr><tr><td>End Date/Time</td><td>08/22/2019 09:27:00 (-0500)</td></tr><tr><td>Conducted By (Name)</td><td></td></tr></tbody></table>



EFTA00087808


<table><thead><tr><th>Manufacturer</th><td>Samsung</td></tr></thead><tbody><tr><td>Model</td><td>Galaxy S9 SM-G960U</td></tr><tr><td>Serial Number</td><td>R58M210CDHX</td></tr><tr><td>IMEI Label</td><td>355028093486118</td></tr><tr><td>Handset Type</td><td>Touch Screen</td></tr><tr><td>Handset Colour</td><td>Black</td></tr><tr><td colspan="2">PIN/Security Code Locked No</td></tr><tr><td>Damaged</td><td>No</td></tr><tr><td>Battery Flat</td><td>No</td></tr><tr><td>Capacity Value</td><td>0.00 Bytes</td></tr><tr><td>Included SIM Card</td><td>No</td></tr><tr><td>Included Memory Card</td><td>No</td></tr><tr><td>Accessories</td><td>No</td></tr><tr><td>Attachment(s)</td><td>IMG_0114.JPG</td></tr><tr><td colspan="2">Imaging Details</td></tr><tr><td>Start Date/Time</td><td>08/22/2019 09:15:00 (-0500)</td></tr><tr><td>End Date/Time</td><td>08/22/2019 09:27:00 (-0500)</td></tr><tr><td>Conducted By (Name)</td><td></td></tr><tr><td colspan="2">Primary Extraction Software Manual Review</td></tr><tr><td>Engineering Card Created</td><td>No</td></tr><tr><td>Notes</td><td>Manual review - no items of relevance located.</td></tr><tr><td>Evidence Reference</td><td>0003</td></tr><tr><td>Evidence Type</td><td>PDA/Smart Phone</td></tr><tr><td>Logged In Date/Time</td><td>02/12/2020 12:13:16 (-0500)</td></tr><tr><td>Storage Location</td><td>Disposed</td></tr><tr><td>Priority</td><td>N/A</td></tr><tr><td>Description</td><td>BOP Samsung Galaxy S9 issued to</td></tr><tr><td>Property Number</td><td>0214 207675</td></tr><tr><td>Seized Date/Time</td><td>08/22/2019 09:40:05 (-0500)</td></tr><tr><td>Seized By/Produced By</td><td></td></tr><tr><td>Powered Off Time</td><td>00:00:00 (+0000)</td></tr><tr><td>Processing Result</td><td>N/A</td></tr><tr><td>Archived</td><td>No</td></tr><tr><td>Notes</td><td>Manual review only for messages related to job performance failure/Epstein suicide; SIM card and MicroSD not analyzed.</td></tr><tr><td colspan="2">Pre-Imaging Details</td></tr><tr><td>Start Date/Time</td><td>08/22/2019 09:40:00 (-0500)</td></tr><tr><td>End Date/Time</td><td>08/22/2019 10:08:00 (-0500)</td></tr><tr><td>Conducted By (Name)</td><td></td></tr><tr><td>Manufacturer</td><td>Samsung</td></tr><tr><td>Model</td><td>Galaxy S9 SM-G960U</td></tr><tr><td>Serial Number</td><td>R58M210D9MR</td></tr><tr><td>IMEI Label</td><td>355028093495721</td></tr></tbody></table>

EFTA00087809

Primary Extraction Software Manual Review

Engineering Card Created No



0001: IMG_0110.JPG

5237_IMG_0110.JPG

0001: IMG_0111.JPG

5238_IMG_0111.JPG

0001: IMG_0112.JPG

5239_IMG_0112.JPG

0002: IMG_0114.JPG

5240_IMG_0114.JPG

0002: IMG_0115.JPG

5241_IMG_0115.JPG

0003: IMG_0117.JPG

5242_IMG_0117.JPG

0003: IMG_0118.JPG

5243_IMG_0118.JPG

Case Disposal



| Disposal Date/Time | 08/22/2019 10:30:00 (-0500) |

| :--- | :--- |

Disposed To

Disposal Type

Method

Disposal Status

Assigned Staff Member Name

Cyber Investigations Washington

Company

Bureau of Prisons

United States

Disposed Evidence Items

Evidence Reference 0001

| Evidence Type | PDA/Smart Phone |

| :--- | :--- |

EFTA00087810

<table border="1"><tr><td>Description</td><td>BOP issued Samsung Galaxy S9 -</td></tr><tr><td colspan="2">Evidence Reference 0002</td></tr><tr><td>Evidence Type</td><td>PDA/Smart Phone</td></tr><tr><td>Description</td><td>BOP Samsung Galaxy S9 issued to</td></tr><tr><td colspan="2">Evidence Reference 0003</td></tr><tr><td>Evidence Type</td><td>PDA/Smart Phone</td></tr><tr><td>Description</td><td>BOP Samsung Galaxy S9 issued to</td></tr></table>

EFTA00087811