ck Sheet, ZA, Tier-G, dated August 10, 2019. 58. Report of Forensic Examination dated September 16, 2019, regarding Digital Devices Examined. 59. Timeline Analysis of Desktop Property for Michael Thomas and Tova Novel. U.S. Department of Justice Office of the Inspector General DATE: CASE NUMBER: 2019-010614 EFTA00060777 60.

Timeline Analysis of Desktop Property # 0214 207268 HDD Image Z6E8M349.E01 (Device 1) Important Identifiers: User: Michael Thomas Username: BOP19012 SID: S-1-5-21-1823249720-32109

9 6:15:03 56 8/10/2019 6:15:07 57 8/10/2019 6:19:05 58 8/10/2019 6:19:05 59 8/10/2019 6:29:07 60 8/10/2019 8:55:12 EFTA00131525 1 Timeline Analysis of Desktop Property !I (Device 1) _ 2 3 4 Michael Thomas 5 6 7 Microsoft Security Identifier 8 9 _ &gm 10 User BOP19012 Successfully Logged onto the System