RE: Epstein search warrant documents

I'm not sure who's the exact right person to ask this, so wanted to get everybody on one email chain about it — I have the hard drive that dropped off that has new Epstein search warrant materials, but it looks like there are also old materials (that I think we had previously received and uploaded??) on the hard drive, and so I'm not sure what's new.

Just generally, and and I talked about this last week too, but it's basically impossible for us to [ ]
keep track of what we're getting, and what has been completed, without some kind of identification
or labeling system, along with a list of which devices have been extracted and downloaded.

So for example on the hard drive currently, there are 38 folders labeled "loadFilesn through "37loadFiles" with a modified date of 11/14/19, which I think we may have already previously received — but I'm not sure, because we haven't gotten any info on which folders match up to which devices, etc. And then there's another folder titled "NYC024362° that has a modified date of 1/27/20, so I think that may be the materials we hadn't previously received? That folder by itself has more than 600,000 items.

I don't want to giveManything that we've already previously received and uploaded, and I can't tell from the folder or file names whether everything on the drive is new, or whether just additional materials were saved onto it in addition to what we already have. =, are you able to give us some guidance on this? Ultimately what we really need is a spreadsheet of every device, whether it's been dumped (or partially dumped), and then identifying that same info—which device, and what materials from it — are being given to us with each data transfer. Otherwise I think organizationally and for review purposes it will be a total disaster for us.

Were happy to have a meeting on this if that's helpful — and thanks everybody for the assistance.

[ ]

Assistant U.S. Attorney
Southern District of New York

Sorry for the delayed response. They are tearing out our old network and giving us a new one, they mandated we delete old stuff (about 400 TB worth). Now that they are working on replacing the network, we can do only local work. I should be able to give you an accounting of what is what. I can say, off the top of my head, that all windows based items from the NY search have been handed over as well as all loose media. The CDs from NY only contained pictures, no documents. There are still some Apple items from NY that need to be produced. As far as the Island stuff goes, the 1st item on your spreadsheet, the "kitchen" mac has been produced. Still working on the rest.

NY CART Coordinator
Senior Forensic Examiner

On Feb 23, 2020 12:21 AM,
wrote:
Team,

Following up on the below from last weekend, I'm still not sure how we're addressing this so I thought it would make sense for us to all schedule a (hopefully relatively brief) meeting to all get on the same page? We didn't hear back on which files had previously been provided, but our tech folks did their best to differentiate, and we got access to the materials yesterday and its well over a million documents, and we don't have any idea what we're looking at — i.e., which devices the materials came from, whether it's full or partial results, how many more devices we have coming, etc.

Based on the attached search warrant returns, it looks like from the New York mansion (the PD9 there are approximately 40 devices that would have storage (computers, hard drives, thumb drives, etc.) and that's not even counting at least 60+ CDs. And then from the Virgin Islands (the Excel spreadsheet), at least more than 2S devices, including multiple servers / server racks.

So we gotta know what we've already received, what remains, anticipated schedule, etc, and I know it's a lot of moving pieces on all sides so wanted to loop in everybody at once. The case team will be in California this coming week from Tuesday through Friday, but then I think generally around the first week of March, which will hopefully be plenty of time to schedule a productive meeting.

I could do Thursday morning, but I think it would be helpful for us to get the accounting in advance of the meeting so we can figure out in advance what (if any) additional steps we need — is that possible?

From:

Sent: Tuesday, March 03, 2020 09:59

To:

3503-016
Page I of 5

SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17

EFTA_00001920

EFTA00157105

Cc:

Subject: RE: Epstein search warrant documents

Can we do Thursday morning? My network should be back by then and I can give you a good accounting.

NY CART Coordinator

Senior Forensic Examiner

On Mar 2, 2020 11:15 AM wrote: Doing the weekly check in on this-is there a time this week when everyone can meet on this?

thanks,

Here is a listing of what I have already handed over in load files to the US Attorney's Office for taint review. Some points of clarification: There were 9 IDE hard drives found in the Manhattan apartment, they turned out to be 3 copies of 3 drives (9 drives in total) from a July 2007 search on one of his properties. I only processed 3 (as they were all copies). All the loose media from the NY apartment is included. All the Windows machines from the NY apartment are included. Only 2 Macs from NY and 1 from the Island are included.

I will have to more closely coordinate with whoever is loading up Relativity with the remaining Macs as the tool they have to be processed with does not easily re-name the load files.

Spreadsheet is attached.