From: a) To: a Subject: FW: Epstein search warrant documents Date: Monday, March 2, 2020 5:17:36 PM Thanks J. | think they are just looking to get an idea of what they have and where it came from. I'm sure you could easily provide. FBI New York On Mar 2, 2020 5:11 PM, "i <> cote: Hey i. I'm gone for the day. I can give you a better answer tomorrow morning. As of right now, our network is still down, but can give you an idea. NY CART Coordinator Senior Forensic Examiner cell desk On Mar 2, 2020 4:56 PM, (a) EE cote: Can y have a meeting to discuss 2 me a status on this? SDNY is hitting me up and wants to They are having trouble figuring out what documents came for what d Thanks, = From: a SANS) es Sent: Monday, March 02, 2020 11:14 AM (USANYS) <a ; > Subject: RE: Epstein search warrant documents yone can meet on this? Doing the weekly check in on this — is t thanks, || From: SS BEEN (USANYS) Sent: Monday, February 24, 2020 17:38 3503-014 Page | of 4 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001912 EFTA00157097

--=PAGE_BREAK=--

\\ Cc: (USANYS) [Contractor] aT; SEE (USANYS) a <5) Subject: RE: Epstein search warrant documents Totally understand about the network issues—we can relate. | do still think it will be helpful to all sit down to Are folks a ve an in-person @ ilab that ne would be a spreadsheet o' on, to make sure everybody is on the same page what | think v device referenced in the two xt week? An vould be most helpful to facilitate tha separate ¢ arch warrant returns, with columns fo umped the contents, whether they've been reviewed and/or transferred, what portions were transferred, etc. Something roughly like the attached, with any other cat you think would be useful the info on the attached is mostly hypothetical, obviously, just as examples. That will help us fully understand what's been reviewed, transferred, and received so far, and what remains from the discs and tures, we do want copies of those a , please includi going to do an initial screen to make sure no CP, and since | think the et those to be able to review them as well.) many thanks, Sent: Monday, February 24, 2020 09:24 To ES (SNS) a: a PT! (USA NYS) (USANYS) <r Cc: EY (USANYS) (Contractor) <q: ER (SANs) _ ff Y jouo Subject: RE: Epstein search warrant documents Sorry for the delayed response. They are tearing out our old network and giving us a new one, they mandated we delete old stuff (about 400 TB worth). Now that they are working on replacing the network, we can do only local work. I should be able to give you an accounting of what is what. I can say, off the top of my head, that all windows based items from the NY search have been handed over as well as all loose media. The CDs from NY only contained pictures, no documents. There are still some Apple items from NY that need to be produced. As far as the Island stuff goes, the 1st item on your spreadsheet, the "kitchen" mac has been produced. Still working on the rest. 3503-014 Page 2 of 4 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001913 EFTA00157098

--=PAGE_BREAK=--

NY CART Coordinator Senior Fore: Examiner cell desk , ME (USANys)" > wrote: On Feb 23, 2020 12:21 AM, " Team, Following up on the below from last weekend, I’m still not sure how we're addressing this so | opefully relatively brief) m thought it would make sense for us to all schedule a (he ng to all get e? We didn’t hear back on \ st to differentiate, and but our tech on the same pz hich files had previously been pre folks did thei t access to the materials yesterday its well over a million documents, and we don’t have any idea what we're looking at —i.e., which devices the materials came from, whether it’s full or partial results, how many more devices we have coming, etc. Based on the attached search warrant returns, it looks like from the New York mansion (the PDF) torage (computers, hard drives, thumb there are approximately 40 devices that would have drives, etc.) and that’s not even counting at least 60+ CDs. And then from the Virgin Islands (the Excel spreadsheet), at least more tha vices, including multiple servers / server racks So we gotta know what we've already receiv what remains, anticipated schedule, etc, and | know it’s a lot of moving pieces on all sides so wanted to loop in everybody at once. The case team will be in California this coming week from Tuesday through Friday, but then | think generally around the first week of March, v ve to schedule a productive h will hopefully be plenty of t meeting thanks all, From: EE. GR (USAnys) Sent: Saturday, February 15, 2020 16:30 TO: eS) <>; a Cc: EE (USANYS) (Contractor) a: ; SS SS) a: (USANYS) <r Subject: RE: Epstein search warrant documents I'm not sure who’s the exact right person to ask this, so wanted to get everybody on one email 3503-014 Page 3 of 4 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001914 EFTA00157099

--=PAGE_BREAK=--

chain about it —| have the hard drive that [J dropped off that has new Epstein search warrant materials, but it looks like there are also old materials (that | think we had previously received and uploaded??) on the hard drive, and so I’m not sure what's new. Just generally, and [J and | talked about this last week too, but it’s basically impossible for us to keep track of what we’re getting, and what has been completed, without some kind of identification or labeling system, along with a list of which devices have been extracted and downloaded. So for example on the hard drive currently, there are 38 folders labeled “loadFiles” through “37loadFiles” with a modified date of 11/14/19, which | think we may have already previously received — but I’m not sure, because we haven’t gotten any info on which folders match up to which devices, etc. And then there’s another folder titled “NYCO24362” that has a modified date of 1/27/20, so | think that may be the materials we hadn't previously received? That folder by itself has more than 600,000 items. | don’t want to give [J anything that we've already previously received and uploaded, and | can’t tell from the folder or file names whether everything on the drive is new, or whether just additional materials were saved onto it in addition to what we already have. [J are you able to give us some guidance on this? Ultimately what we really need is a spreadsheet of every device, whether it’s been dumped (or partially dumped), and then identifying that same info — which device, and what materials from it — are being given to us with each data transfer. Otherwise | think organizationally and for review purposes it will be a total disaster for us. We're happy to have a meeting on this if that’s helpful — and thanks everybody for the assistance. Assistant U.S. Attorney Southern District of New York 3503-014 Page 4 of 4 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001915 EFTA00157100