Keyboard shortcuts

/
Search the files
j k
Move through a list of results
[ ]
Previous or next document
g g · G
Top or bottom of the page
Esc
Leave a search field or close this box
?
Show this box

Go to a page: g then

h
Index
t
Timeline
p
People
r
Redactions
x
Explore
w
News
l
Legislation
a
About

Correspondence

Emails on evidence extraction and drive inventory for Epstein case devices

Email exchange between investigators and a vendor about evidence drives, data recovery of failed servers, empty extracted files, and device inventory spreadsheets.Machine-written summary

I don’t have the evidence in front of me, but it is probably accurate. It is not unusual for the software to find such files. I will review Monday to make sure. As to your questions from last night, the sheet should be comprehensive. I only recall 1 addition, but I am sure that what I have is reflected in the sheet. As for the items in dark grey, there are 2 servers with multiple drives. Some of those drives have physically failed. We have to get them to one of our HQ specialists for recovery. Since they are physically broken, data recovery may or may not be possible. It can be a very long process. We will get that moving ASAP. Need anything else, let me know.

In addition to the pending questions below, we’ve been advised by the vendor that is reviewing the initial seven devices (that were provided on a per-device extraction basis, as previously discussed) that those materials include approximately 71,000 documents that are zero bytes (i.e., empty files). They are listed in the attached spreadsheet.

Is that accurate? Or does that reflect some issue with the extraction process?

thanks,

This is very helpful, thank you. Comparing this to the prior spreadsheet, and leaving aside the “Nothing for Southern” designations as well as the NYC numbers that look like they’re for the

3503-058

Page 1 of 2

SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7,8,9,10,15,and 17

EFTA_00002204

EFTA00157380

desktops that held the actual drives we’re looking at (such as NYC024385, 387, 389, 391, and 393, and NYC027909), I think there are just three additional devices listed here that weren’t on the spreadsheet you previously sent. I have those as:

  • NYC024328 (row 10)

  • NYC024367 (row 62)

  • NYC027910 (row 96)

Could you please confirm that I have those additions correct, and that I’m not missing any? And it looks like all of those were included in the drive you provided today.

I also see there are some drives that are still being processed, including NYC024376 through 380 and several drives in NYC024395 – could you please let us know what that means?

Thanks very much, and we’ll circle back if any issues with anything we received today, which should get to in the next day or two.

Here is the up to date spreadsheet. I color coded things to hopefully make it easier. There are 5 items I have to get you (as we discussed this morning) Those should take another day or 2, so looking at Monday/Tuesday for that. Any questions, let me know.

3503-058

Page 2 of 2

SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7,8,9,10,15,and 17

EFTA_00002205

EFTA00157381