From: To: Ce: Subject: RE: MCC DVRs --- UNCLASSIFIED Date: Wed, 18 Sep 2019 17:42:54 +0000 Importance: Normal Sent: Wednesday, September 18, 2019 1:33 PM Subject: FW: MCC DVRs --- UNCLASSIFIED DVR #1 configured and reviewable now. Positive development. Please see below. Sent: Wednesday, September 18, 2019 1:30 PM To: Ce: Subject: MCC DVRs --- UNCLASSIFIED As mentioned, the vendor, SigNet came in this morning to OTD to assist with DVR1 and DVR2. With his help, DVR1 is up and running and we are able to view video. We will get that video to MXU so they can upload it to TTK for your review. DVR2 is still unreadable. It seems to have stopped recording sometime around July 29, 2019 due to a hard disk failure. That failure was unnoticed until early August, prior to dates in question, when the vendor was contacted for support. DVR2 was not fixed prior to us taking custody. So, we can affirmatively say that the dates in August will NOT exist on DVR2. Our belief is data exists on DVR2 from roughly July 14/15-July 29, 2019, although this cannot yet be confirmed. We EFTA00075832

--=PAGE_BREAK=--

can attempt to repair the raid, determine the striping and rebuild the volume manually, but it will be a time intensive process with no guarantee of success or timeline for completion. I'll let you know when data from DVR1 has been uploaded by MXU to TTK. Unit Chief/Supervisory Special Agent/Forensic Examiner Digital Forensic Analysis Unit Operational Technology Division EFTA00075833