EFTA00157402.pdf

From: To: Cc: SublecC Data I. (NY) (FBI) neaM RE: )EXTERNAL EMAIL) RE: Epstein Evidence status Tuesday, August 4, 2020 2:03:47 PM Looking over the spreadsheet, NYC027913 was a thumbdrive. It is possible there was nothing there, but am not sure. I'll get back to you on that one. Apart from that, you are complete. There are no more supplemental files coming. The only thing left is the stuff for physical recovery. NY CART Coordinator Senior Forensic Examiner cell desk On Aug PM, (USANYS)" wrote: Following up on the below, thanks for those responses, that's very useful. In terms of the one outstanding item, in the thumb drive I received from yesterday with CART materials, NYCO27913 is not included, so we are still missing that one. But I do see that each of the items with the "Included next round" label from the most recent spreadsheet (attached, with those items highlighted in red) are included, so that's helpful, thanks. In terms of any of the folders that have been produced so far, I know that you've sent supplemental materials on a handful of them (approximately seven total, I think) — do you currently expect to send any other supplemental materials for any of the devices we've received so far? Or are we fully complete? And then assuming those are all fully complete, or once they are, the only items pending will be the devices highlighted in gray in the attached, which we understand are being processed for hardware recovery. thanks, From: M. I. (NY) (FBI) Sent: Monday, August 03, 2020 19:17 To: (USANYS) Cc: (USANYS) [Contractor) •z :•; (FBI) c z'; (USANYS) •c >: (NY) IFBIl I. (NY) (USANYS) 3503-068 Page 1 of 5 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002227 EFTA00157402 (USANYS) (USANYS) < > Subject: RE: [EXTERNAL EMAIL] - RE: Epstein Evidence status Sorry I didn't get back sooner. It's been kinda crazy. I'll answer your questions in order, so match them up. I'm going off what I can see on my phone. The final items were given to . She should have them. Reach out to her for delivery. The 3 folders you mention contain supplemental files, dc,nore them. I am pretty sure NYC027913 is included with the items has. If not, please let me know. As far as the old questions, you should have everything now. The zero byte files are just that. Sometimes the software will recover either file headers, or items off the directory listings, but no actual content. It lists them as zero length files. Need anything further, let me know. NY CART Coordinator Senior Forensic Examiner cell desk On Aug , (USANYS)" wrote: I know you may still be traveling, but I wanted to check in on a handful of outstanding issues. If you're not available, perhaps can assist? 1. On this past Sunday and Monday, you had said you had you had additional materials you planned to get to us on Monday. I don't believe we ever received anything additional this past week. Are those still pending, and if so, when can we get those materials? 2. There were three folders that were included in the first disc you provided to us, but then also provided again on the most recent disc. Those folders are: NYC024328, NYC024366, and NYC024392. Can you please let us know why those were provided twice? In particular, we need to know whether any clinnlPmental information is in the new folders with those NYC numbers, or whether we can ignore them on the recent disc because we already received them. 3. One item is listed on your spreadsheet as having been provided on 7/23, but it was not on the most recent disc you sent. That item is: NYC027913 (row 40 in your spreadsheet). In case it's useful, I'm attaching a version of the spreadsheet you put on the disc, but with all the items we received folders for on the most recent hard drive highlighted in yellow. Separately, we're still waiting on answers to the questions from Thursday and Friday, July 23 and 24. To refresh, those questions are: 3503-068 Page 2 of 5 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFFA_00002228 EFTA00157403 4. Comparing your most recent spreadsheet to the prior one, and leaving aside the "Nothing for Southern" designations as well as the NYC numbers that look like they're for the desktops that held the actual drives we're looking at (such as NYC024385, 387, 389, 391, and 393, and NYC027909), I think there are just three additional devices listed here that weren't on the spreadsheet you previously sent. I have those as: NYC024328 (row 10), NYC024367 (row 62), and NYC027910 (row 96). Please confirm that these were added, and also that we're not missing any? I believe those were all provided on the first disc. 5. As previously mentioned, the vendor has advised that in the initial seven devices provided, there were approximately 71,000 documents that are zero bytes (i.e., empty files). They are listed in the second attached spreadsheet. Is that accurate? Or does that reflect some issue with the extraction process? thanks, Assistant U.S. Attorney Southern District of New York From: EM, (NY) (FBI) '= => Sent: Friday, July 24, 2020 15:09 To: (USANYS) Cc: (USANYS) [Contractor) •• •MI :•; I. (NY) {FBI) 'ca (USANYS) <=MMIM>: (USANYS) s I. (NY) (FBI) (USANYS) (USANYS) Subject: [EXTERNAL EMAIL) - RE: Epstein Evidence status I don't have the evidence in front of me, but it is probably accurate. It is not unusual for the software to find such files. I will review Monday to make sure. As to your questions from last night, the sheet should be comprehensive. I only recall I addition, but I am sure that what I have is reflected in the sheet. As for the items in dark grey, there are 2 servers with multiple drives. Some of those drives have physically failed. We have to get them to one of our HQ specialists for recovery. Since they are physically broken, data recovery may or may not be possible. It can be a very long process. We will get that moving ASAP. Need anything else, let me know. NY CART Coordinator Senior Forensic Examiner cell desk On Jul 24, 2020 2:20 PM, (USANYS)" 3503-068 Page 3 of 5 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFFA_00002229 EFTA00157404 wrote: In addition to the pending questions below, we've been advised by the vendor that is reviewing the initial seven devices (that were provided on a per-device extraction basis, as previously discussed) that those materials include approximately 71,000 documents that are zero bytes (i.e., empty files). They are listed in the attached spreadsheet. Is that accurate? Or does that reflect some issue with the extraction process? thanks, From: (USANYS) Sent: Thursday, July 23, 2020 18:08 To: M, I. (NY) (FBI) < > Cc: (NY) (FBI) US M , I. (NY) (F8I) (USANYS) ; (USANYS) (USANYS) [Contractor] <.= > Subject: RE: Epstein Evidence status This is very helpful, thank you. Comparing this to the prior spreadsheet, and leaving aside the "Nothing for Southern" designations as well as the NYC numbers that look like they're for the desktops that held the actual drives we're looking at (such as NYCO24385, 387, 389, 391, and 393, and NYCO27909), I think there are just three additional devices listed here that weren't on the spreadsheet you previously sent. I have those as: 1. NYCO24328 (row 10) 2. NYCO24367 (row 62) 3. NYCO27910 (row 96) Could you please confirm that I have those additions correct, and that I'm not missing any? And it looks like all of those were included in the drive you provided today. I also see there are some drives that are still being processed, including NYCO24376 through 380 and several drives in NYCO24395 — could you please let us know what that means? Thanks very much, and we'll circle back if any issues with anything we received today, which should get to in the next day or two. thanks again, 3503-068 Page 4 of 5 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002230 EFTA00157405 Original Message From: ME, (NY) (FBI) < > Sent: Thursday, July 23, 2020 14:44 To: (USANYS) Cc: (NY) (FBI) `t )'; < > Subject: Epstein Evidence status I. (NY) (FBI) Here is the up to date spreadsheet. I color coded things to hopefully make it easier. There are S items I have to get you (as we discussed this morning) Those should take another day or 2, so looking at Monday/Tuesday for that. Any questions, let me know. NYC) CART Coordinator Senior Forensic Examiner (office) (cell) 3503-068 Page 5 of 5 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002231 EFTA00157406