EFTA00174661.pdf

From: Subject: RE: GS-14 Justification --- UNCLASSIFIED Date: Mon, 06 Jan 2020 20:38:50 +0000 Importance: Normal Classification: UNCLASSIFIED Sorry for the delay, I wanted to get started on the Buffalo Robbery case again... Over the last year I completed 23 cases including the Epstein case, Pensacola shooting case, and the Kealoha Corruption case. I testified in the Kealoha corruption trial — case where the police set up a relative of the police chief for a crime (mailbox theft) he did not commit; because they were having a family dispute. Recovered deleted video from 17 hard drives (3 different models of DVRs) and identified metadata to include time and date stamps (this became important because the video in question was copied over the day after the police were served with a subpoena). I testified in a Richmond Virginia Murder case where the prosecutor was about to make plea agreements for 5 years, but after recovering the video of the murders they resulted in judgments of 40 years or more. I prepared to testify in a NC Murder trial, but the case was pled out just before I left for the trial. I have developed methods of recovery by identifying the file structure and data to be recovered; then either copy the data out and make playable (carving) or creating a new file structure and copying data into this structure and playing through the DVR. (This is why I sometimes need the DVR in question) I have collaborated with other law enforcement partners within the federal government and keep contacts with the United States Secret Service, Department of Health and Human Services, and the Office of the Inspector General. (contacts I made through the Scientific Working Group — Digital Evidence). I also keep in touch with Virginia Sate lab and a New Jersey Police agency who do video data recovery. (I taught a FBI approved class at both SWG-DE and the International Association for Identification - The IAI) Thank you for your efforts in this matter... Regards, From: Subject: RE: GS-14 Justification --- UNCLASSIFIED Classification: UNCLASSIFIED It would also be helpful to say for something like EFTA00174661 "you've completed x cases in the last year, recovering data from x number of DVRs." "testified in X number of trials" (I know there's the Hawaii one. Were there others?" "Collaborated with x number of other experts (USSS?) " This should be an easy lift. We just need the details. Thanks, From: (OTD) (FBI) sel Subject: GS-14 Justification -- UNCLASSIFIED Classification: UNCLASSIFIED Hi M, I wanted to send you a quick reminder to provide me with metrics of how many cases you've done, specific to DVRs. Can you provide a brief description on how the recovery is done? I need enough material to put together a paragraph, thanks, Walt SUPERVISORYPHYMCALSCENTISTUFAAGEExAmwm) DIGITALFORENSICANALYSISUNIT(DPCFAU) FORENSIC AUDIO. VIDEO AND IMAGE ANALYSIS PROGRAM BLDG 27958A. ERF-E. QUANTICO VA 22135 Classification: UNCLASSIFIED Classification: UNCLASSIFIED Classification: UNCLASSIFIED EFTA00174662