From: MI (NY) (FBI) •= > Sent: Tuesday, May 12, 2020 13:03 To: (USANYS) (Contractor) < > Cc: MI, (USANYS) (USANYS) <a; =I. (NY) (FBI) an (FBI) `t z• Subject: Re: Epstein search warrant documents (USANYS) I (NY) Just to be clear. The US Attorney's Office (or it's contractors) are not "processing" anything. You are taking files that I will be extracting from processed evidence and putting them into an E-Discovery tool (Relativity) to do a taint review. Relativity is NOT a forensic tool. It is incapable of dealing with many things that are found forensically on a computer like free space, slack space, and system files to name a few. When we started this, and you insisted you do the taint review in Relativity, I warned you that it was adding months worth of work on top of what was already done, and that Relativity was incapable of viewing everything. You insisted we do it this way. So now and I have come up with a way to fit this round peg into this square hole. We will get it done. Sorry it has taken so long, but we are talking about terabytes worth of data over multiple forms of digital evidence. Phones, tablets, loose media, cameras, DVRs, servers, laptops, and desktop computers. We have gotten past encryption on multiple devices. When we review devices on such large cases, we usually do it piece by piece as things are processed, I was unaware that you didn't want to review as things were processed, that you wanted to do it "all at once", so that added to the delay. Sorry for that. Just a differentiation of methodology I suppose. and I feel confident that the method we have come up with will be more consistent and preserve the attribution of files to devices and links of e-mails to attachments that the load file generation that I did a while back was lacking. FBI NY CART Coordinator Senior Examiner From: (USANYS) Sent: Tuesday, May 12, 2020 11:33 AM To: I (NY) (FBI) < M='; (USANYS) (Contractor) 3503-042 Page 3 of 14 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002169 EFTA00157349

Cc: =, (USANYS) (USANYS) Subject: RE: Epstein search warrant documents Okay, so just to check, you both think that there is not a need to do a test run? You're both comfortable with just basically sending us copies of everything? I don't totally understand why we couldn't have done that eight months ago, but regardless of the passage of time, I want to make sure we understand so we can report to our supervisors. I assume that means that we (at the U.S. Attorney's Office and through contractors) will therefore need to do all the processing ourselves, correct? And thanks again to you both. From: EM, I. (NY) (FBI) Sent: Tuesday, May 12, 2020 11:30 To: (USANYS) [Contractor] a; USANYS) Cc: In (USANYS) ; (USANYS) Subject: RE: Epstein search warrant documents Like said in his earlier email. It will be the raw data and it will be marked so it is easier to attribute it to a particular device. Problem now is how to get the data to since he is teleworking. NY CART Coordinator Senior Forensic Examiner cell desk On Ma 12, 2020 11:15 AM ' (USANYS)" wrote: I have no doubt you do, but can you please tell us what that plan is? Thanks! From: M, i (NY) (FBI) < > Sent: Tuesday, May 12, 2020 11:11 To: M, (USANYS) [Contractor) a; (USANYS) < › Cc: M, (USANYS) (USANYS) Subject: RE: Epstein search warrant documents I will use the spreadsheet, no problem. and I ironed out all the details. We've got a good plan moving forward that will meet your needs. 3503-042 Page 4 of 14 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002170 EFTA00157350

NY CART Coordinator Senior Forensic Examiner cell desk On May 12, 2020 10:34 AM, wrote: it would be very helpful for us if you could please use the attached spreadsheet in transmitting that info so we make sure we get all the info we need. I think you had previously sent us a list of certain information that unfortunately wasn't helpful for us, so we want to make sure we're all on the same page. (USANYS)" In terms of data transfer, are you just sending a literal copy of all the raw data, and we'll process and upload it on our end? I ask to make sure we don't lose any searchability — when FBI sent versions before, it had already been processed. I think what we talked about on the phone a month ago was getting, for example, data from one device to make sure it transfers correctly, before sending over literally everything — is that still the plan? thanks, From: M. (USANYS) (Contractor] Sent: Tuesday, May 12, 2020 10:27 To: (USANYS) Cc: M a I. (NY) (FBI) < > Subject: RE: Epstein search warrant documents Hello M I . Me and just finished our phone call regarding the data. will put together a list of the all of the data and where the data was collected. I will work to send some hard drives to so he can begin to copy the data and send it to us. I will need to figure out a way to get the data off of the hard drives. Please let us know if there are any questions. Thank you. From: (USANYS),< > Sent: Friday, May 8, 2020 2:15 PM To: I. (NY) (FBI) < >; (USANYS) - >; •=l-(NY)(Fai)< >; , 3503-042 Page 5 of 14 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002171 EFTA00157351