EFTA01659713.pdf

From: To: Subject: [EXTERNAL EMAIL] - RE: Morning Date: Thu, 09 Dec 2021 18:56:52 +0000 Importance: Normal Inline-Images: image001.png; image002.png; image003.png Thank you bothI From Sent: Thursda , December 9, 20211:56 PM Subject: Re: Morning Perfect, email when you're downstairs and I'll jump into the elevator. From: Sent: Thursda December 9 20211:54 PM To: Subject: [EXTERNAL EMAIL] - RE: Morning i am heading across now. I will not bring a computer, I will bring the bag of devices. See you in a moment! From Sent: Wednesda December 8 20215:18 PM To: u j : e: Morning HeMI My meeting got a scheduled for 3pm, want to meet from 2-245? Liz From: Subject: [EXTERNAL EMAIL] - RE: Morning EFTA01659713 Hello, just trying to figure out tomorrow. Thank you. From Sent: Wednesda December 8 20212:52 PM To: Subject: RE Morning Hi all, I am completely open any time after 2 tomorrow, or I can make a time in the morning work. Please let me know what you all are thinking. Sou, From Sent: Tuesda December 7 2021 6:00 PM T Subject: RE: Morning Things we learned today, thank you for clarifying: 1. On one of the harddrives you've populated for us, this is the breakdown. (*Pert small 0.038 (r) /1/ APPle <loud (Backup) (I) AecountPackne (0) • Celk0nteReadereae (r) • Apple <loud (Backup)2021.11-09-Repod.Jdr (r) report small blended (r) lb Apple <loud Backcp)(0 • CelkbnteReadthezot (r) • Apple KIM ataChr0).2021-11.09-R•P.d.uld. I-. 1... report D_b3;5(1) )cloud at Apple .O0.4 (ShckuP)(r) rot awn AccountPackAge(r) 1— • Celk0neeReader.ere (r) 5— 7— • Apple <loud (EceauP)2021.11.09.Repon.tddt (/) 3— 03P3n 0_22 (e) Ofr Apple <loud (Becloc)(0 le AecountOactage(r) • Celkbreefleadtrne 0) 5— 7-. • Apple <loud (BerkuP)2021.11.0tRepon.uldr (I) 8— 1_ repot Wracks/ (r) ffr Apple <loud (Sackup)(0) 5 1- • CelkhnteReaderArre (r) hd Mack 17821.11-09 Pawn eider, 5 1 report M12(c) EvellenteCollecben (r) askew • (i.vdeneeCcateboh.2021.11.09.Reportuldt (r) phone • Celltentelleaderexe (r) 2. The disk called "1b1 copy thumbdrive from K&L Gates 9/29/2020" is the same as 1B1 on the harddrive, but exported from the FTK imager. The disk version is better to give to defense. Things that we need to tackle on Thursday, by repopulating the SDNY drive: 1. the CD called "working copy of emails" that initially had on it a sticky labelled "lb8" is not 1b8. It might be 1b2. EFTA01659714  This is the contents of that cd: tg Report_Files (r) 12/1/2020 3:53:52 PM ■ Autorun.inf (r) 36 12/1/2020 3:53:52 PM ■ Index.html (r) 400 12/1/2020 3:53:52 PM ■ Report.fo (r) 79,917,625 12/1/2020 3:5922 PM ■ Report.pdf (r) 37,566,805 12/1/20204:08:27 PM 2. 188 on the harddrive is in the access data file type and needs to be read by the FTK imager. Ideally we could dump that out of the program into a type that can be more easily read by defense counsel. This is the current disk contents: Name Date modified Type Size 3 NYC030127.ad1 11/24/2020 3:45 PM AD1 File 16,910 KB 3 NYC030127.ad1.1xt 11/24/2020 3:46 PM Text Document 2 KB 3. the file called 1B9 contains the full Callie phone. This should NOT be produced as it is. The folder 1B9 was populated with that phone by mistake. [This also might be 1b2.] The true contents of 1B9 has to be re-pulled across from the original- from the folder called "Report" from 2/5/21, last updated at 10:01 questions in blue: 11)5 Just pertinent, john bicks 1b6 Screenshots, not a phone extraction 1b7 Just pertinent, calvina bostick lb8 Is this just pertinent? 1b9 [needs help] 1b10 just pertinent, Bicks, callie, whitney, 1b12 Is this just pertinent?, Askew phone this is the music I referred to throughout this afternoon: https://www.youtube.com/watch?v=Lk2M4dk0RQs&t=964s skip to 16:14 "standby to reckon up your battleships" From: Sent: Tuesday, December 7, 2021 10:01 AM To: Cc: Subject: Re: Morning Works for me From: Sent: Tuesday, December 7, 2021 9:59:45 AM To: EFTA01659715 Cc Subject: [EXTERNAL EMAIL] - RE: Morning Ok, but I have a hard stop at 4, so can we start right at 3? From: Se • • To: Cc: Subject: Re: Morning I have someone coming in at 230, which also involves Steve. Can we do 3-4? From: Sent: Tuesda December 7 20219:53:32 AM To Cc Subject: [EXTERNAL EMAIL] - RE: Morning I can do 2:45-3:45? From Sent: Tuesday, December 7, 2021 9:52 AM To: Cc: Subj : •e: orning I flee at 4. Can we go earlier? From: Sent: Tuesday, December 7, 2021 9:25:53 AM u ject: Re: Morning Would 430 work for you? everyone is out tomorrow, so that unfortunately wouldn't work. Liz From: Sent: ues ay, ecem er , .• .• To: Cc Subject: [EXTERNAL EMAIL] - Re: Morning EFTA01659716 I can do 430-530 Otherwise I'm free tomorrow from 9 am-3 pm, but I forget if Wednesday doesn't work for you Sent from my iPhone On Dec 7, 2021, at 9:01 AM, wrote: Good luck want to stand by for this afternoon in case Steve wraps up this morning? From: Sent: Tuesday, December 7, 2021 8:59:35 AM To Cc Subject: Re: Morning Just got called to testify in Maxwell. Court starts at 9:30 and I'm 2nd. I'll reach out when done. From: Sent: Tuesday, December 7, 2021 8:58:02 AM To Cc Subject: [EXTERNAL EMAIL] - Re: Morning Adding - Sent from my iPhone On Dec 7, 2021, at 8:53 AM wrote: I'm running a few minutes late. Steve, do you want to grab and get started? I'm close... From: Se • • • To: Subject: [EXTERNAL EMAIL] - Morning I'll be in the lobby of 26 fed in 5 minutes should we meet you in lobby or go to a specific floor? Sent from my iPhone EFTA01659717