RE: 90A-NY-3151227 (Epstein) --- UNCLASSIFIED

I am a CART Examiner at Quantico and have received items for case 90A-NY-3151227 (Epstein).

From what I understand videos have been recovered from DVR 1 and my immediate focus here will be on DVR 2. Some of the drives for DVR 2 are under repair. Once those are complete we will be attempting to reassemble the disks and hopefully gain access to the data.

I will keep you posted on progress.

Can you please request the password for the Administrator account on the main server controller (Dell PowerEdge R420)?

We have DVR 1 up and it appears to see the disk array but we are determining access. We have DVR 2 up but it is not currently seeing the disk array. We are working on the connection.

We'd like to have the Administrator password from the main controller to get a full picture.

Thanks,

Working on it. Hope to have the password by the end of the day.

FBI New York | Squad C-19

Current status:

All systems are powered up using clones of the original disks.

DVR Main Controller —The Administrator password is needed to gain access. is working [ ]
on it.

DVR 1 System — This is up and running. The disk array appears to have assembled but we need access to the DVR Main Controller for visibility.

DVR 2 System — This is our priority and is currently problematic. The system is up, but the disk array is NOT assembling. It appears the configuration of these 16 disks in the array has been lost (likely from being pulled out of the system live). 3 of the disks had to undergo repair before being useable. We will have to attempt to reassemble this array manually (if possible).

EFTA00075824

Typically, we can look at the structure of the disks and find patterns that potentially give us clues into how they were assembled but a review today did not prove insightful.

Important: Can you please reach out to MCC and request if there is any documentation available there on the configuration of this disk array or a technician there that can speak to it? In the meantime, I will review the operating system drives to see if there is any configuration documentation there that might have been saved.

FYI, I will be away from the office Thursday and Friday. With the holiday on Monday, I won't be back in the office until Tuesday, Sept 3 rd.

However, if you receive the Admin password and/or information on the disk array configuration please respond to this email. My Lab Supervisor and a Senior Level Technician are copied.

All.

Left a VM for the MCC facilities manager this morning regarding the correct admin password for the DELL PowerEdge and a contact for the tech/maintenance contractor.

I will let you know ASAP when I have the details.

For situational awareness, we provided a briefing on the status to our AD and A/DAD today.

EFTA00075823

Gentlemen.

Apologies for the delay. The individuals operating the DVRs and servers for the jail are not the most technical operators. They did not have or know of a password for the server, as you had requested. However, I was able to identify the person that has been maintaining the system for MCC from and installation and maintenance standpoint. It might be best to reach out directly to him...Mt SIGNET TECHNOLOGIES, telephone number-

Please reach out to me on my cell phone for any further questions or concerns.

Thanks,
FBI New York | Squad C-19