Documents Associated with Timeline Analysis of Desktop Property # 0214 207268 HDD Image Z6E8M349.E01 -- Michael Thomas (BOP19012) Line 12, 13, 16: 8/10/2019 0:39:31 User saves/downloads document named "SHU 30 CHECK SHEET (CONDENSED)_1.docx" to location "C:\Users\bop19012\Documents\GroupWise\" 8/10/2019 0:39:31 The "SHU 30 CHECK SHEET (CONDENSED)_1.docx" Word Document is also opened at this time. 8/10/2019 0:43:00 Last Printed timestamp indicates "SHU 30 CHECK SHEET (CONDENSED)_1.docx" was printed ----LOCATED IN ZIP FILE---- Line 17, 18: 8/10/2019 0:44:19 User saves/downloads document named "SHU Rules Metropolitan Correctional Cen ter New York.docx" to location "C:\Users\bop19012\Desktop\" 8/10/2019 0:44:19 The "SHU Rules Metropolitan Correctional Center New York.docx" Word Document is also opened at this time ----LOCATED IN ZIP FILE---- Line 19: 8/10/2019 0:44:53 User opens document named "SHU ORDERLY REQUEST 42214.rtf£" from location "C:\ Users\bop19012\Desktop\" ----LOCATED IN ZIP FILE---- Line 21, 24: 8/10/2019 0:48:20 User opens document named "1 - SHU LOCATOR 2019(HARDCOPY).docx" from network location "\\NYMC_GRPS_SERVER\GRPS\GROUPS\SHAREDOC\SHU PAPERWORK, LOCATOR, HARDCOPY\" ----NEED TO GET FROM BOP---- Line 31: 8/10/2019 0:54:06 User opens document named "Daily Fire & Security Form[(1].pdf" in Internet Ex plorer from “http://sallyport.bop.gov/inst/nym/corrsvc/docs/" ----LOCATED IN ZIP FILE---- Line 34: 8/10/2019 0:57:18 User open Microsoft Database named "“Roster.accde" at "\\NYMC_APPS_SERVER\APP S\BOPAPPS\Roster\Ver3.1\" ----NEED TO GET FROM BOP---- Documents Associated with Timeline Analysis of Desktop Property # 0214 207270 HDD Image Z6E8K1EV.E01 -- Tova Noel (BOP61232) Line 20: 8/9/2019 23:46:16 User navigates in IE to “http://www.benefits.va.gov/warms/docs/admin 21/m21_1/mr/part3/subptii/ch0O7/m21-1iii_ii_7?.doc" ----LOCATED IN ZIP FILE---- Line 62: 8/10/2019 5:18:18 User open Microsoft Database named “Roster.accde" at "“file:///K:/BOPAPPS/Ros ter/Ver3.1/Roster.accde" ----NEED TO GET FROM BOP---- Line 85: 8/10/2019 5:58:47 User opens file from IE named “nysd-1_2015-cr-00536-446092-00792[1].pdf" -- SENTENCING MEMORANDUM OF OMAR AMANAT ----LOCATED IN ZIP FILE---- EFTA00128376