Epstein Secrets

s Recover Folders for Z6E8M349 Completed Successfully Process Recover Folders for Z6E8K1EV Completed Successfully Export Logical Evidence File of Michael Thomas user's profile (bop19012) on Z6E8M349 Named BOP19012.L01 Export Logical Evidence File of Tova Noel user's profile (bop61232) on Z6E8K1EV Named BOP

9012.L01 Export Logical Evidence File of Tova Noel user's profile (bop61232) on Z6E8K1EV Named BOP61232.L01 Email used by BOP is called GroupWise GroupWise Email can be cached locally to a system if configured to do so EFTA00128282 Path for cached email \ USERACCOUT\AppData \ Local \ Novell \Groupwise

Office December 12, 2019 2019-010614 OFFICE CONDUCTING EXAMINATION CYBER II) SUBJECT(S) Cyber Investigations Office 0452 Correctional Officer Michael Thomas, Federal Bureau of Prisons, Metropolitan Correctional Center, New York, NY DIGITAL DEVICE(S) EXAMINED 1. EnCase Forensic Image of a Seagate 500GB

documents containing the keyword Reyes. Leonard did not identify any communication between BOP personnel on the devices regarding Epstein. BOP uses GroupWise for email communication, SENSITIVE BUT UNCLASSIFIED EXAMINER NAME AND TITLE: LITS REVIEWER NAME AND TITLE: ASAC SIGNATURE: SIGNATURE: OIG For

Timeline Analysis of Desktop Property # 0214 207268 HDD Image Z6E8M349.E01 (Device 1) Important Identifiers: User: Michael Thomas Username: BOP19012 SID: S-1-5-21-1823249720-3210992811-1527010081-1102 SID: Microsoft Security Identifier Date Time Action 8/10/2019 0:36:

oft Security Identifier Date Time Action 8/10/2019 0:36:54 User BOP19012 Successfully Logged onto the System 8/10/2019 0:38:36 User launches GroupWise (grpwise.exe) 8/10/2019 0:39:31 User saves/downloads document named "SHU 30 CHECK SHEET (CONDENSED)_1.docx" to location "CAUsers \bop19012 \ Docum

Allegation(s) Inattentive to Duty Failure to Follow Policy Source of Allegation(s) , Lieutenant Subject of Incident'a Information: Full Name Michael Thomas Tovia Noel Title and Grade Material Handler Foreman Correctional Officer GS-5 Victim (Inmate) Information (If applicable) Full Name ): Title/R

important relevant details Is expected no later than the end of the shift in which the incident occur To nd ed. The synopsis should be sent via GroupWise, from the Warden or Acting Warden, to the Regional Director, Sr. Deputy Regional Director, Regional Executive Assistant, Regional Counsel and the R

/10/2019 6:19:05 59 8/10/2019 6:29:07 60 8/10/2019 8:55:12 EFTA00131525 1 Timeline Analysis of Desktop Property !I (Device 1) _ 2 3 4 Michael Thomas 5 6 7 Microsoft Security Identifier 8 9 _ &gm 10 User BOP19012 Successfully Logged onto the System — 11 _ User launches GroupWise (grpwis

4 Michael Thomas 5 6 7 Microsoft Security Identifier 8 9 _ &gm 10 User BOP19012 Successfully Logged onto the System — 11 _ User launches GroupWise (grpwise.exe) 12 User saves/downloads document named "SHU 30 CHECK SHEET (CONDENSED)_1.docx" to location "CAUserAbop19012Wocuments\GroupariseV 13 T