From: "I To: Cc: 1 (USANYS)" <1 > Subject: RE: call tomorrow re: search warrant documents ? Date: Tue, 14 Jul 2020 16:17:36 +0000 Yeah it's sometimes challenging to try to precisely relay info on this, and given the importance I think it'd be helpful — thanks. I'll propose tomorrow at 1:00. From: (USANYS) Sent: Tuesday, July 14, 2020 12:16 To: Cc: Subject: RE: call tomorrow re: search warrant documents ? Sure, if that would be helpful. 1 is better for me than 12, but I can make it work if need be. Morning I can do 10-11. From: ) Sent: Tuesday, July 14, 2020 12:07 PM To: (USANYS) Cc: Subject: call tomorrow re: search warrant documents ? Could you join a call tomorrow? I could do noon or 1:00 if that works? (Or I also could do the morning if I get coverage for a couple VOSR check-ins with Berman.) From: (NY) (FBI) <E > Sent: Tuesday, July 14, 2020 12:02 To: (USANYS) (Contractor( < Cc: (NY) (FBI) < c›; (NY) (FBI) a, ) Subject: RE: Epstein search warrant documents (USANYS) I'll fill it out and get it back to you ASAP. I am available tomorrow from 7:30 AM till about 3:30 PM, just let me know when. NY CART Coordinator Senior Forensic Examiner cell desk On Jul 14, 2020 11:58 AM, ' wrote: EFTA00009941

We've received and reviewed the hard drive you provided last week. Unfortunately it's still not possible for us to determine which devices have been fully 100% included in that drive? We're not able to tell based on looking at the contents, because the devices do not all appear to have their own folders. The attached spreadsheet is the one you included on the drive, but it does not reflect which devices have been fully transferred. Could you please fill in the two columns I've added, L and M, indicating which devices have been fully transferred to us, and for the ones that are not fully transferred, the estimated time for completion? If you could please let us know that today it will be extremely helpful in figuring out how to proceed. And separately, could you please let me know what times you're available for a call tomorrow? It would be helpful to discuss why a number of the devices were combined together in folders on the drive, rather than being provided separately. And also helpful to know how long it would take to correct that. thanks very much, From: Sent: Wednesday, May 13, 2020 12:25 To: . (NY) (FBI) ifi ; (USANYS) [Contractor] < Cc: >; `: 1) (NY) (FBI) <->; . (NY) (FBI) < > Subject: RE: Epstein search warrant documents Respectfully, I think there are some miscommunications here — all we have asked is to receive the materials in a format such that we can view them using a system we have access to. We're not able to get web-enabled access through any FBI tool, so we asked for the materials to be transferred in a loadable format so we could put them on Relativity, which both we and the agents can access. We're required to have the files in a format that we can produce them to defense counsel. I've done that in many other cases and it hasn't previously been an issue. My understanding from =I is that the best way to do it now is just for us (the U.S. Attorney's Office) to get the original files, which our vendor will process—by which I just mean converting into file formats that are loadable onto Relativity. It doesn't really have anything to do with the taint review—we have to have access to the docs in our systems for discovery purposes. And we were happy to get the materials as they were processed, but when we received the 1.1 million documents earlier this year, they were in a format that wasn't usable for the reasons described in the email I sent on March 9. Again, I understand from =I that the best way forward is to just get copies of the materials in their original formats, which I understand will be segregated and designated by device. That should work for us! I was just trying to understand the approach, as well as the timeline. thanks, From: (NY) (FBI) < > Sent: Tuesday, May 12, 2020 13:03 To: (USANYS) [Contractor] Cc: S; (NY) (FBI) < Subject: Re: Epstein search warrant documents . (NY) (FBI) < > EFTA00009942

Just to be clear. The US Attorney's Office (or it's contractors) are not "processing" anything. You are taking files that I will be extracting from processed evidence and putting them into an E-Discovery tool (Relativity) to do a taint review. Relativity is NOT a forensic tool. It is incapable of dealing with many things that are found forensically on a computer like free space, slack space, and system files to name a few. When we started this, and you insisted you do the taint review in Relativity, I warned you that it was adding months worth of work on top of what was already done, and that Relativity was incapable of viewing everything. You insisted we do it this way. So now and I have come up with a way to fit this round peg into this square hole. We will get it done. Sorry it has taken so long, but we are talking about terabytes worth of data over multiple forms of digital evidence. Phones, tablets, loose media, cameras, DVRs, servers, laptops, and desktop computers. We have gotten past encryption on multiple devices. When we review devices on such large cases, we usually do it piece by piece as things are processed, I was unaware that you didn't want to review as things were processed, that you wanted to do it "all at once", so that added to the delay. Sorry for that. Just a differentiation of methodology I suppose. and I feel confident that the method we have come up with will be more consistent and preserve the attribution of files to devices and links of e-mails to attachments that the load file generation that I did a while back was lacking. FBI NY CART Coordinator Senior Examiner From: Sent: Tuesday, May 12, 2020 11:33 AM To: . (NY) (FBI) <a>; (USANYS) [Contractor] <[email protected]> Cc: Subject: RE: Epstein search warrant documents Okay, so just to check, you both think that there is not a need to do a test run? You're both comfortable with just basically sending us copies of everything? I don't totally understand why we couldn't have done that eight months ago, but regardless of the passage of time, I want to make sure we understand so we can report to our supervisors. I assume that means that we (at the U.S. Attorney's Office and through contractors) will therefore need to do all the processing ourselves, correct? And thanks again to you both. From: (NY) (FBI) < > Sent: Tuesday, May 12, 2020 11:30 To: (USANYS) [Contractor] < >; Cc: Subject: RE: Epstein search warrant documents >; Like said in his earlier email. It will be the raw data and it will be marked so it is easier to attribute it to a particular device. Problem now is how to get the data to since he is teleworking. EFTA00009943