Date: Fri, 23 Aug 2019 8:27:32 PM (UTC)¶
Subject: Assistance request --- UNCLASSIFIED¶
From:¶
Classification: UNCLASSIFIED¶
Indicates required information.¶
1. (U) Service Requested¶
- 1 Identification of requested support
- The New York Field Office requests an examination to decrypt Filevault II full disk encryption found on submitted hard drive
- 2 *Due to the high profile nature of the case, high priority is requested
2. (U) Legal Authority¶
- 1 *Proof of legal authority (Include copy in 1A package or reference document serial)
- Pursuant to search warrant issued by the Southern District of New York on July 11, 2019. A copy of the search warrant is included in the 1A package of this communication.
3. (U) Device Identification¶
- 1 *Identification of device(s) to be analyzed
4. (U) Brief Synopsis/Background of Case¶
- Submitted is an image file of a 1TB Seagate external HDD S/N: NA98Z5WD designated as NYC024338, 1B56.
Southern District of New York contacted C-20 regarding several victims that had been sexually abused by JEFFREY EPSTEIN in the mid 2000’s. EPSTEIN invited minors into his residences, one of which was located in Manhattan, and paid them to provide massages to him which turned sexual in nature.¶
5.(U) Previous Analysis/Status of Computer Hard drive¶
- 1 *Characterization of any previously conducted analysis
Item was imaged and found to be filevault II encrypted via the TX1 disk duplicator.¶
- 2 *Status of Computer: locked, unlocked, or unknown. Also include password or potential passwords gleaned through other investigative methods
3503-006¶
Page 1 of 2¶
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7,8,9,10,15,and 17¶
| EFTA_00001889 | | :--- | :--- |¶
This is a simple Markdown document with no headings, paragraphs, or tables. It contains just the text “EFTA_00001889”.¶
EFTA00157074¶
No passwords or potential passwords have been discovered to date.¶
- 3 *If device is not considered evidence, state this clearly
The device is evidence in the above captioned case.¶
6. (U) POC/Special Handling of Evidence¶
- 1 Requestor’s point-of-contact information, supporting CART examiner, and special handling of evidence
Point of contact is CART Senior examiner of the NY Field office. Image is currently available for exploitation on OPWAN.¶
Classification: UNCLASSIFIED¶
3503-006¶
Page 2 of 2¶
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7,8,9,10,15,and 17¶
EFTA_00001890¶
EFTA00157075¶