Court filing
Transcript of Jury Trial Proceedings, Volume 5 (PM Session) — Carla Jackson and Teldrin Foster
Summary
Transcript of jury trial proceedings, Volume 5 (PM Session), of February 9, 2024 before the Honorable J.P. Boulee, United States District Judge, filed June 14, 2024 as Document 1028 in United States v. Carla Jackson and Teldrin Foster, Docket No. 1:20-CR-00296-JPB, in the U.S. District Court for the Northern District of Georgia, Atlanta Division. The index lists James Berni (cross-examination continued) and Jim Persinger (direct, cross, and redirect examination). The transcript records the Court withdrawing an earlier ruling, and discussion of an issue that arose over the lunch hour about the government's expert witness, including a request for a mistrial by Saraliene Durrett that the government opposes.
Summary drafted by a model from the document's text below and checked by script against that text before publication. It is a navigation aid, not a reading of what the document proves. Where AI is used
Cite this document
“Transcript of Jury Trial Proceedings, Volume 5 (PM Session) — Carla Jackson and Teldrin Foster.”
Original at ecf.gand.uscourts.gov, No. 1:20-cr-00296-JPB-CMS, Doc. 1028. Archived at Pandemic Darlings, https://pandemicdarlings.com/court-filings/us-v-dixon/2024-02-09-jury-trial-transcript-vol5-dkt-1028/
, SHA-256 d206da19a0b54205bd97d69999fc6b51d718ed7e2b7c75e842dd78e0a4ab3ae6.Full text
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 1 of 145
THE FOLLOWING IS THE PDF OF AN OFFICIAL
TRANSCRIPT. OFFICIAL TRANSCRIPTS MAY ONLY BE FILED IN CM/ECF
BY THE OFFICIAL COURT REPORTER AND WILL BE RESTRICTED IN
CM/ECF FOR A PERIOD OF 90 DAYS. YOU MAY CITE TO A PORTION
OF THE ATTACHED TRANSCRIPT BY THE DOCKET ENTRY NUMBER,
REFERENCING PAGE AND LINE NUMBER, ONLY AFTER THE COURT
REPORTER HAS FILED THE OFFICIAL TRANSCRIPT; HOWEVER, YOU ARE
PROHIBITED FROM ATTACHING A FULL OR PARTIAL TRANSCRIPT TO ANY
DOCUMENT FILED WITH THE COURT.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 2 of 145
155
1 UNITED STATES DISTRICT COURT
FOR THE NORTHERN DISTRICT OF GEORGIA
2 ATLANTA DIVISION
3
4 UNITED STATES OF AMERICA, )
)
5 )
-VS- ) DOCKET NO. 1:20-CR-00296-JPB
6 ) VOLUME 5 (PM SESSION)
CARLA JACKSON AND )
7 TELDRIN FOSTER, )
)
8 DEFENDANTS. )
9
TRANSCRIPT OF JURY TRIAL PROCEEDINGS
10 BEFORE THE HONORABLE J.P. BOULEE
UNITED STATES DISTRICT JUDGE
11 FEBRUARY 9, 2024
12
13 APPEARANCES:
14 ON BEHALF OF THE GOVERNMENT:
TAL C. CHAIKEN, ESQ.
15 SAMIR KAUSHAL, ESQ.
BABASIJIBOMI MOORE, ESQ.
16 ASSISTANT UNITED STATES ATTORNEYS
17
ON BEHALF OF THE DEFENDANT - TELDRIN FOSTER:
18 LEIGH ANN WEBSTER, ESQ.
SARALIENE DURRETT, ESQ.
19
20 ON BEHALF OF THE DEFENDANT - CARLA JACKSON:
DAVID D. MARSHALL, ESQ.
21
22
23 STENOGRAPHICALLY RECORDED BY:
24 PENNY PRITTY COUDRIET, RMR, CRR
OFFICIAL COURT REPORTER
25 UNITED STATES DISTRICT COURT
ATLANTA, GEORGIA
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 3 of 145
156
1 I N D E X
2 WITNESS: PAGE:
3 1. JAMES BERNI
4 CROSS-EXAMINATION (CONT'D).................170
5
2. JIM PERSINGER
6
DIRECT EXAMINATION.........................177
7 CROSS-EXAMINATION..........................217
REDIRECT EXAMINATION.......................254
8
9
- - - - -
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 4 of 145
157
1 (PROCEEDINGS HELD IN OPEN COURT AT 1:44 PM, ATLANTA, GEORGIA)
2 THE COURT: Let me have Special Agent Stites step out
3 of the courtroom, please.
4 (Witness excused from the courtroom.)
5 THE COURT: All right. I know there's an issue with
6 the current witness. Ms. Lee sent an e-mail. I guess y'all
7 communicated something to her, which we can address.
8 But before I get to that, I want to circle back to
9 the issue from last night and into this morning regarding the
10 Secret Service report and the Christian statements, because I
11 think I may have jumped the gun a little bit and assumed
12 something that wasn't established in my ruling this morning.
13 But where I was last night was, you know, we've got the two
14 layers of hearsay. And the one, I understand, not offered for
15 the truth, that wasn't the contentious issue. The contentious
16 part was the other layer and whether it qualified for effect
17 on the listener.
18 And where I was last night was, I'm happy to see if
19 you can lay the foundation about the effect on the listener.
20 And I think that's right and where I should continue to be for
21 now, until that's either been laid or not laid.
22 What I did this morning was when the issue came back
23 up, was -- I think I had heard Ms. Chaiken talk about that
24 investigation being completely separate. And I think I
25 assumed from that that this was then something that Special
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 5 of 145
158
1 Agent Stites would have reviewed just in preparation for trial
2 and not as part of his investigation.
3 And I don't know if that's the case or not. I think
4 there's been some inconsistencies on that. And I'm just not
5 sure when he would have looked at it and what he would have
6 done or not done after he looked at it.
7 So I'm going to withdraw -- and so basically, I
8 was -- where I was was I thought the relevance was slim to
9 none if it was a completely separate investigation that wasn't
10 part of his and not something he considered, and, therefore, I
11 thought the 403(b) analysis was pretty clearly going to keep
12 this out because it's just confusing otherwise.
13 But I think I was in error to say that because I
14 don't know what use he made of it, when he made that use of it
15 and what effect, if any, him reading this had on his
16 investigation.
17 So I withdraw my ruling on that. And I'm happy to
18 have the defense see if they can lay that foundation. I just
19 don't know if they'll be able to or not.
20 I also did look at the Kyle v. Whitley case that the
21 defense cited and it seems like, you know, generally that line
22 of questioning can be fair game.
23 So we'll see if the foundation can be laid or not.
24 And it may be that you can, may be that you can't. I don't
25 know. So that's issue 1.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 6 of 145
159
1 Issue 2, I understand from just a short e-mail from
2 Ms. Lee that something arose over the lunch hour regarding the
3 current expert witness of the government. Is that something
4 we can discuss with him on the stand or do we need to ask him
5 to step out?
6 MS. DURRETT: Can we ask him to step out, Your Honor?
7 THE COURT: All right. Sir, if you could please step
8 out of the courtroom as well.
9 And on your way out, would you -- if you see Special
10 Agent Stites out there, will you let him know he's welcome to
11 come back in?
12 THE WITNESS: Yes, Your Honor.
13 (Witness excused from the courtroom.)
14 THE COURT: Okay. What's the new issue?
15 MS. DURRETT: Your Honor, before the break we were
16 questioning Agent Berni about his report, and I think the
17 Court could probably tell, we were leading up to and trying to
18 get information about how there was different information in
19 his report than there is in the records that we have. And we
20 took a break for an hour.
21 When we came back into the courtroom, the government
22 provided us a certification of records that they just got over
23 the break to support a claim that somehow the timing in the
24 report is correct. And then they also sent us another report,
25 an Excel spreadsheet, that the agent relied on when he made
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 7 of 145
160
1 his report.
2 So that wasn't detailed in the report that he
3 provided and it was not told to me when I talked to him
4 earlier this week on the phone. Your Honor had ordered that I
5 be able to speak with him and he did speak with me, but no one
6 told me that he had been provided an Excel spreadsheet that
7 was created by a forensic examiner.
8 And so, Your Honor, we would move for a mistrial at
9 this point. We're halfway through cross-examination, and they
10 have provided two new pieces of evidence related to this
11 witness to contradict the testimony that he's already
12 provided.
13 THE COURT: Well, let's do this. Let me interrupt
14 you.
15 I guess, first off, can I see these two new
16 documents? I don't know if we're talking about an
17 encyclopedia or something else.
18 MS. DURRETT: One was e-mailed to us. I don't have a
19 copy.
20 Leigh Ann's going to forward that to Ms. Lee.
21 THE COURT: I'm sorry, one moment.
22 MR. MARSHALL: And, Judge, am I being copied on these
23 e-mails? On that last one?
24 THE COURT: I have no idea. I'm not copied on them
25 either. Let's make sure you --
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 8 of 145
161
1 MR. MARSHALL: Sorry, Judge. Well, I shouldn't ask
2 you. Sorry, Your Honor.
3 Thank you. Thank you very much.
4 COURTROOM DEPUTY CLERK: Someone send it to me and
5 I'll send it to the judge.
6 THE COURT: All right. Well, let's -- I guess this
7 first document I'm looking at, just so the record's clear, I
8 guess the government handed it to me, so -- well, let's just
9 make this Court's Exhibit whatever we're on, Ms. Lee.
10 COURTROOM DEPUTY CLERK: 3.
11 THE COURT: Okay. Court's Exhibit 3 is the
12 certificate of authenticity of business records.
13 And then the second document is what?
14 MS. WEBSTER: It's an Excel spreadsheet that we
15 forwarded to Ms. Lee. Sorry.
16 MS. DURRETT: It came to us in an e-mail, so we just
17 forwarded it to Ms. Lee.
18 THE COURT: Okay. Give me a moment. Give her and me
19 a moment.
20 While that's going through cyberspace, hitting a -- I
21 don't know if it'll hit a cell tower before it gets to me or
22 not, how that works.
23 But while that's making its way to me, let me hear
24 from the government as to these two documents. I mean, the
25 one just looks like a certificate of authenticity of business
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 9 of 145
162
1 records, which I -- you know, we'll see what the government
2 says and I'll see what Ms. Durrett says, but it wouldn't seem
3 like that'd be cataclysmic, but go ahead.
4 MR. MOORE: Your Honor, just to make sure that the
5 record is clear, they have had all of the records related to
6 his testimony since 2020, 2021. In any case, for more than
7 two years.
8 What we have provided them is the work product of an
9 analyst who took the data that they had been provided and
10 changed the time zone based off of the fact that it was in
11 Central Time Zone and we are not in Central Time Zone, we are
12 in Eastern Time Zone, to make it relevant for the jury.
13 And that is what was provided to the expert and that
14 is what he created his report from. All of the underlying
15 data had been disclosed to them in the large Excel sheet that
16 included all of Teldrin Foster's transactions with the rapid!
17 PayCards and additionally all of the other transactions with
18 the rapid! PayCard.
19 THE COURT: Okay. So the certificate of authenticity
20 is just the certificate as to the underlying spreadsheet?
21 MR. MOORE: So they received the initial certificate
22 of authenticity for the underlying spreadsheet. We -- because
23 they have this confusion about the time zone, over the break
24 we then asked for an updated certificate of authenticity that
25 just explains the time zone issue. There's only that -- the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 10 of 145
163
1 slight additional line in number 1 saying what the time zone
2 is.
3 But the original certificate of authenticity which
4 they provided with the original records has been provided to
5 them before today. So the only new information in the
6 certificate they provided today is it now notes that their
7 records are in the Central Time Zone.
8 THE COURT: All right. And so this spreadsheet that
9 we'll mark, that we'll -- is this a spreadsheet that's small
10 enough to print out and make a court's exhibit just so it's
11 clear what's what? I don't want to say we're going to print
12 out the spreadsheet and mark it as a court's exhibit if it
13 somehow is a 35,000-page document.
14 MS. CHAIKEN: No. I don't know if it'll fit on one
15 page, but it will be small enough.
16 THE COURT: Okay. All right. Well, I'll tell you
17 what. Let me impose on the government a request that their
18 paralegal print a hardcopy of this to get to Ms. Lee to make
19 it Court's Exhibit 4. Thank you.
20 I know spreadsheets are sometimes easier or difficult
21 to print out.
22 All right. So, Mr. Moore, if I understand it, this
23 is two things: One is it's the spreadsheet that converts
24 Central to Eastern; and, two, it's a certificate of
25 authenticity that says this is a document in which we
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 11 of 145
164
1 converted from --
2 MR. MOORE: So the certificate of authenticity -- the
3 update is just to say that the records we originally received
4 were in Central Time Zone to help explain why an analyst
5 needed to update it to Eastern.
6 THE COURT: All right. And what do you think about
7 Ms. Durrett's request for a mistrial because you gave her
8 these over the lunch hour?
9 MR. MOORE: Your Honor, we oppose it. She has had
10 all of the underlying data, the data that the expert relied
11 on. And all that has -- is different now is that we have
12 updated their confusion on the time zone. And she has
13 cross-examined him on it, that would be the appropriate way
14 for that issue to be addressed. She talked to him for an
15 hour. This was not one of the questions she asked. If we had
16 understood she had this confusion, we would have been happy to
17 have taken this step before, but she raised this confusion for
18 the first time during the cross-examination today.
19 THE COURT: All right. Ms. Durrett?
20 MS. DURRETT: Your Honor, it's not confusion. It's
21 the fact that all of the records we have had have had one time
22 in them. And we have asked about the records last night. I,
23 again, e-mailed and said what is the basis for this summary
24 chart of the rapid! Pay records. And they told us the
25 spreadsheet and I looked at that spreadsheet.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 12 of 145
165
1 It has certain times in it. We've never had anything
2 until today about 5, 10, 15 minutes ago, something that says,
3 oh, wait, this is actually Central Time.
4 THE COURT: Okay. But -- I would take from the
5 context of your cross-examination from this morning that you
6 knew full well there was an issue there and that's why you
7 were cross-examining him about the times.
8 MS. DURRETT: That's correct.
9 THE COURT: So what's the big deal?
10 MS. DURRETT: Because now we have -- we look like we
11 don't understand the records, but they --
12 THE COURT: Okay. Well, that's fine. We can do a
13 quick -- I'll make a quick statement to the jury that explains
14 the issue. This is not a -- I can't imagine -- I mean, do you
15 really want a mistrial over that issue?
16 MS. DURRETT: I do, Your Honor.
17 THE COURT: Okay. Well, that's denied. That's -- I
18 can't even imagine giving a mistrial over this fairly simple
19 issue.
20 I mean, as I see it, you know, everyone's had the
21 documents for a long time. You recognized full well in your
22 review of the documents they were off by a couple hours or an
23 hour. You made fodder of it during the start of your
24 cross-examination. Over the lunch hour the government
25 realized, yeah, that's right. And so they sent you -- you
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 13 of 145
166
1 know, I think in good faith, sent you -- you know, looked into
2 it and sent you something that explains that. And it sounds
3 like it confirms what you already knew. And so I think a
4 brief statement to the jury about what happened is more than
5 adequate.
6 MS. DURRETT: Your Honor?
7 THE COURT: Yes, Ms. Durrett.
8 MS. DURRETT: If the Court is not going to grant a
9 mistrial, we would ask that his testimony be excluded. We
10 have already asked to exclude his testimony because it was
11 provided to us in an untimely manner. There wasn't a full
12 conclusion in it. The conclusion doesn't say anything about
13 this time. And it was yesterday while I was here in court
14 looking at the records that I realized there was a time
15 problem. And so it's not --
16 THE COURT: Did you ask the government if they
17 realized there was a time problem and if they had additional
18 records?
19 MS. DURRETT: Your Honor, with all due respect, I
20 don't think that's how we normally do it. If someone has --
21 THE COURT: I was just asking, you know, if it's --
22 I'm just -- I just don't see how this is a substantial issue.
23 If you knew full well it was off by an hour, it seems like a
24 simple, minor issue.
25 I'm not going to grant a mistrial. It would seem
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 14 of 145
167
1 like -- you know, I, frankly, don't even know that I need to
2 give a statement to the jury about it, it's such a minor
3 issue. But I'd be happy -- if you think there is some
4 prejudice given that you cross-examined on it and now you've
5 been given the document, I kind of see that and I'd be happy
6 to give a statement to the jury that there was an issue with
7 the time zones on the documents and an additional document
8 clarifying the time zones was provided by the government over
9 the break. But anything more than that, I think is way out of
10 line.
11 MS. DURRETT: Your Honor, I also think there's an
12 issue because they gave --
13 THE COURT: So I'm going to deny your motion to
14 strike his testimony. I'm going to deny your motion for
15 mistrial.
16 Anything else on this issue?
17 MS. DURRETT: Well, Your Honor, I do.
18 The problem is they gave us a spreadsheet just before
19 you came in, I notified your clerk when we got it, that we
20 haven't been able to look it. And so they said, here, oh,
21 this is what he actually looked at, this is the thing he
22 actually looked at. And we haven't had time to look at it.
23 So it's brand-new evidence to us.
24 THE COURT: Brand-new evidence that has one
25 difference from the old evidence you had, which is that
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 15 of 145
168
1 everything's off by an hour?
2 MS. DURRETT: I don't know, Your Honor. I haven't
3 had --
4 THE COURT: Well, that's what the government's
5 represented.
6 Is that what it is, Mr. Moore?
7 MR. MOORE: That is correct, Your Honor. And it has
8 the times with the -- the one hour different and it lists the
9 address of all the locations.
10 THE COURT: All right. Take the time you need,
11 Ms. Durrett, and we'll stand by. We stand adjourned.
12 (After a recess at 2:09 p.m., the proceedings
13 continued at 2:31 p.m. as follows:)
14 THE COURT: Y'all can be seated. Thank you.
15 MR. KAUSHAL: Your Honor, just to complete the record
16 on that last issue Your Honor discussed, I just wanted to
17 clarify that the information that was requested last night by
18 the defense was the underlying records for summary chart 3015,
19 and it was not the information that the agent relied on for
20 preparation of the report. And I just wanted to make that
21 clear because I think it was a little bit unclear earlier and
22 I want the record to reflect that.
23 THE COURT: Okay. I guess -- let's do clear that up.
24 I mean, I think either way, you know, based on what the
25 difference was, it seems, again, very, very minor and the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 16 of 145
169
1 record will reflect we were at a recess for, what, 15,
2 20 minutes and that Ms. -- and it's 2:31, and I was told
3 Ms. Durrett was ready to go back on the record.
4 So I thought it was something that came up over the
5 lunch hour that you'd sent them based on the cross, but it was
6 instead based on a request from last night or something?
7 MR. KAUSHAL: No, Your Honor. They were different
8 requests. I just wanted to make that clear, that the requests
9 were, in fact, different and that this new issue came up today
10 and we provided records that we normally would not provide in
11 response to their request for the underlying information from
12 the expert. That is all.
13 THE COURT: All right.
14 Ms. Durrett, did you want me to say anything to the
15 jury when they come back before you started your cross?
16 MS. DURRETT: No, Your Honor. Thank you.
17 THE COURT: All right. I would be happy to if so,
18 but it sounds like you don't want me to.
19 Let's bring in the jury, please.
20 And, Ms. Durrett, just so I am clear, you've now had
21 time to look at those documents; correct?
22 MS. DURRETT: I have, Your Honor. Thank you.
23 THE COURT: All right. Very well.
24 (Witness recalled to the witness stand.)
25 MR. KAUSHAL: Do you just want to tender it,
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 17 of 145
170
1 Saraliene?
2 MS. DURRETT: Sure.
3 MR. KAUSHAL: He hasn't seen it, so --
4 MS. DURRETT: Okay.
5 (The jury entered the courtroom at 2:34 p.m.)
6 THE COURT: Y'all can be seated. Thank you.
7 Ladies and gentlemen of the jury, I know that was a
8 much longer lunch break than you'd expected when I released
9 you at about 12:30 or so. My apologies for that. Again,
10 things arise that I need to deal with and I don't always know
11 when that's going to happen. So I apologize. Thank you for
12 being here.
13 Ms. Durrett, you can continue your cross.
14 MS. DURRETT: Thank you, Your Honor.
15 CROSS-EXAMINATION (CONT'D)
16 BY MS. DURRETT:
17 Q. Over the break we were provided with what has been marked
18 as Court's Exhibit 4. Do you recognize that document?
19 A. I recognize the document as the original financial, I
20 guess, exhibit that was turned in, yes.
21 Q. I'm sorry. It's not Court's Exhibit 4. Sorry about
22 that.
23 But do you recognize that document?
24 A. I do recognize the document, yes.
25 MS. DURRETT: I move to admit Defense Exhibit 1003.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 18 of 145
171
1 MR. MOORE: Can we see what document?
2 MS. DURRETT: It's the spreadsheet.
3 (Organizational pause.)
4 BY MS. DURRETT:
5 Q. I'm going to show you Exhibit 2954. And that's already
6 been admitted.
7 MS. DURRETT: Please show it.
8 BY MS. DURRETT:
9 Q. Okay. We have been told that this is the data that you
10 relied on when you wrote your report, the part about Teldrin
11 Foster; is that correct?
12 A. Well, this is -- this appears to be the -- I guess the
13 original spreadsheet that was turned over in discovery, yes.
14 Q. Okay. And all I want to do is have you focus on a few of
15 the transactions in this exhibit, which has been admitted,
16 2954.
17 I want you to start by looking at July 17th, 2020. And
18 there should be an entry for 2:39:55. July 19th, sorry.
19 If I were to change 2:39:55 to military time, what would
20 that be?
21 A. 14:39:55.
22 Q. Okay. And is that what is reflected there in that
23 spreadsheet?
24 A. Well, it's reflected in non-military, but it says -- oh,
25 there it is. Yep. It says on there 14:39:55. Yep.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 19 of 145
172
1 Q. Okay. And then I'm going to show you your report,
2 page 19. And do you see the rapid! card transaction that you
3 included in your report?
4 A. I do, yeah.
5 Q. And what is the time that you included there?
6 A. It says 3:39:55 p.m.
7 Q. So your report says the rapid! card transaction happened
8 at 3:39 p.m.; correct?
9 A. Correct. In Eastern Time.
10 Q. Right. But that's not what's reflected in this
11 spreadsheet that I'm showing you; correct?
12 A. I guess not, no.
13 Q. All right. I'm going to show you your report, page 21,
14 which talks about a transaction from July 20th, 2020, at
15 11:52.
16 And what time do you have listed for that transaction,
17 that rapid! pay transaction?
18 A. 11:52:43 a.m. on the 20th.
19 Q. Okay. And when you look at the spreadsheet that is on
20 the screen, what is the time that is reflected for that entry
21 on July 20th, 2020?
22 A. It says 10:52:43.
23 Q. So there's an hour difference?
24 A. There is.
25 Q. I'm going to show you your report at page 30. And your
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 20 of 145
173
1 report there reflects a transaction on July 31st, 2020,
2 correct, on your report?
3 A. It does.
4 Q. What time did that rapid! pay transaction occur based on
5 your report?
6 A. 11:43:06 a.m.
7 Q. And when you look at the spreadsheet of the rapid! pay
8 transactions on the screen, what time is reflected there for
9 that transaction?
10 A. 10:43:06.
11 MS. DURRETT: Your Honor, I'm going to move to admit
12 Defendant's Exhibit 1001, pursuant to Rule 902.11.
13 MR. MOORE: Can I see what the exhibit is? It's a
14 new one?
15 MS. DURRETT: Yes.
16 MR. MOORE: All right. No objection, Your Honor.
17 THE COURT: Mr. Marshall?
18 MR. MARSHALL: No objection.
19 THE COURT: It's admitted.
20 MS. DURRETT: Thank you, Your Honor.
21 BY MS. DURRETT:
22 Q. Mr. Berni, I'm going to show you this exhibit now. Do
23 you know what this exhibit is?
24 A. I mean, this is my first time seeing it. I can see that
25 it's a certificate of authenticity of business records.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 21 of 145
174
1 Q. And can you tell me when it was issued?
2 A. Let's see. It looks like -- it says date of execution
3 would be February 9th of 2024.
4 Q. Is that today?
5 A. It is.
6 Q. And do you see in that certificate anything about the --
7 well, first of all, tell me what the certificate is about,
8 what kind of records.
9 A. These appear to be Green Dot Bank records.
10 Q. Is that the certificate for the rapid! pay transactions
11 in this case?
12 A. I'm not 100 percent sure. Again, I'm here to testify
13 about the cellphone records. These appear to be financial
14 records. So I can't say for sure that they are. I don't
15 know.
16 Q. Did your report include information about rapid! pay
17 records?
18 A. It included date, times and locations of transactions,
19 yes.
20 Q. And in the certificate that you have there, what does it
21 say about the time zone that those records are issued in?
22 A. Give me a second to read it.
23 Q. Sure.
24 A. It states in here that they're in Central Standard Time
25 Zone.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 22 of 145
175
1 MS. DURRETT: Thank you. I have no further
2 questions, Your Honor.
3 MR. MOORE: Very briefly, Your Honor.
4 THE COURT: Let me just check with Mr. Marshall.
5 MR. MARSHALL: No questions, Your Honor.
6 THE COURT: Go ahead, Mr. Moore.
7 REDIRECT EXAMINATION
8 BY MR. MOORE:
9 Q. And Central Time Zone, is that one hour different than
10 Eastern Time Zone?
11 A. It is.
12 Q. And we're currently in Eastern Time Zone?
13 A. We are.
14 Q. So to make the time zones relevant for the jury, you
15 would need to adjust it one hour; is that accurate?
16 A. You would need to add an hour, correct.
17 Q. You were shown -- you were asked about rush hour traffic
18 in Atlanta. Do you know if during 2020 there was a global
19 pandemic that affected traffic patterns?
20 A. There was.
21 Q. Do you have any idea, based on your personal knowledge,
22 if traffic was maybe diminished during this global pandemic?
23 A. I didn't come to Atlanta very often, but in my area the
24 traffic was less.
25 Q. How long have you worked on cell site data?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 23 of 145
176
1 A. Well, for the bureau, since 2015. And then, again, in
2 the military, 2000 to 2007.
3 Q. And this is the work that you do to not just testify here
4 but also find fugitives and missing persons?
5 A. That's correct.
6 Q. And the bureau relies on you to do that analysis in these
7 high-stakes areas?
8 A. It does. Every day.
9 Q. Is the analysis that you've done today for this jury
10 accurate?
11 A. It is.
12 MR. MOORE: Thank you.
13 Nothing further, Your Honor.
14 THE COURT: Any recross?
15 MS. DURRETT: No, Your Honor.
16 THE COURT: Mr. Marshall?
17 MR. MARSHALL: No, Your Honor.
18 THE COURT: All right. Sir, you can step down.
19 Thank you.
20 THE WITNESS: Thank you, Your Honor.
21 (Witness excused.)
22 THE COURT: Please call your -- actually, I think at
23 this point are we going to hear from one of Mr. Foster's
24 witnesses?
25 MS. WEBSTER: Yes, Your Honor.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 24 of 145
177
1 THE COURT: Okay. Please call that witness.
2 MS. WEBSTER: Mr. Foster calls Jim Persinger to the
3 stand.
4 THE COURT: All right. Thank you.
5 Good afternoon, sir.
6 THE WITNESS: Good afternoon to you.
7 COURTROOM DEPUTY CLERK: Please raise your right
8 hand.
9 _____________________________
10 JIM PERSINGER
11 a witness herein, being first duly sworn,
12 was examined and testified as follows:
13 ____________________________
14 COURTROOM DEPUTY CLERK: Would you please state and
15 spell your name for the record.
16 THE WITNESS: Jim Persinger, P-E-R-S-I-N-G-E-R.
17 DIRECT EXAMINATION
18 BY MS. WEBSTER:
19 Q. Good afternoon, Mr. Persinger.
20 A. Good afternoon.
21 Q. Can you tell the Court what your occupation is?
22 A. I'm a digital forensics cybercrime and cellphone
23 analysis. I also write software for law enforcement.
24 Q. And where do you work?
25 A. PM Investigations, Inc.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 25 of 145
178
1 Q. Did you start that company?
2 A. I'm sorry?
3 Q. Did you start that company?
4 A. I did.
5 Q. And how long ago did you do that?
6 A. Late 2000, incorporated 2001.
7 Q. Are you the owner of that company?
8 A. I am.
9 Q. Can you tell us roughly how many cases as a digital
10 forensic specialist you've been involved with?
11 A. About 3500.
12 Q. And are those civil, criminal or both?
13 A. Both.
14 Q. And have you conducted any investigations of cellphones
15 as part of your cases?
16 A. I have.
17 Q. And about how many cases involving cellphones?
18 A. About 650 to 700.
19 Q. And Mr. Foster and I retained you to work on this case;
20 is that correct?
21 A. That's correct.
22 Q. And I'm a defense attorney; is that right?
23 A. Yes.
24 Q. And are there times when you also work for the
25 prosecution?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 26 of 145
179
1 A. That's correct.
2 Q. So you've been on both sides of cases?
3 A. That's correct.
4 Q. Can you briefly tell us what sort of cases you've been
5 involved in?
6 A. Everything from murder, child pornography, intellectual
7 property theft, hacking, any kind of will contesting. I used
8 to do divorce cases. Just about anything that involves data.
9 Q. Can you tell us about some of your work experience prior
10 to PM Investigations?
11 A. I'm a retired Cobb County police officer. Prior to that,
12 I started a software company called JB Enterprises that's
13 still around today. And before that, I was doing research and
14 development for some major corporations.
15 Q. Do you have any kind of professional licensing or board
16 membership in your field?
17 A. I'm a licensed private investigator, a licensed private
18 investigator instructor. I'm POST certified, which is a
19 police officer standard training instructor for law
20 enforcement.
21 Q. Can you give us sort of a short summary of your education
22 and training?
23 A. So I've got high school, some college. I've been to a
24 number of different software vendors that deal with how to
25 create software, using their software. I've also been to
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 27 of 145
180
1 training of hardware devices, such as routers, switches,
2 servers and the configurations between the software and
3 hardware.
4 Q. And are you a digital forensic and cellphone examiner
5 instructor?
6 A. I am.
7 Q. Can you describe that for us?
8 A. So not only do I create software for law enforcement, but
9 I take the tools that are out there and teach law enforcement
10 how to analyze data. Data, even though it's changed, is still
11 ones and zeros, but we come across pieces of evidence that we
12 need to analyze, and I help law enforcement understand that.
13 Q. So have you taught law enforcement in forensics?
14 A. Yes.
15 Q. And who have you taught?
16 A. FBI, GBI, Secret Service, Homeland Security, several
17 different sheriff's departments, police departments throughout
18 the United States.
19 Q. And have you assisted in research and writing documents
20 in your field?
21 A. I have.
22 Q. Can you describe that?
23 A. So I've worked closely with Dr. Jim Tanner out of
24 Boulder, Colorado, to help him come up with a process to
25 track and maintain, dealing with child pornographers, to give
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 28 of 145
181
1 probation tools that they can monitor the individual's
2 Internet traffic or computer usage.
3 Q. And have you produced any content or done software
4 development in your field?
5 A. I have.
6 Q. Can you describe that?
7 A. First, there's CATIE, which stands for Capture and Track
8 Investigative Evidence, available to only law enforcement,
9 that allows them to look at the Internet, find pieces of
10 artifacts, collect it in a safe and pure forensic manner.
11 There's ICIE, which is In Case of Internet Emergency.
12 It's patented, the first 911 button that allows a child to
13 push if they feel depressed or threatened, either at home or
14 at school, collecting information to notify those of the
15 authority.
16 There's Iron Shield, which is patented. It is a firewall
17 protection that offers something totally unique on how it
18 handles data.
19 And then there's Field Search. I have 32,000 users
20 worldwide, that includes our military, the Canadian border
21 police, just about every state has at least one examiner that
22 allows the investigator to quickly analyze a system.
23 Q. And have you been qualified as an expert witness before?
24 A. I have.
25 Q. Can you tell us about where?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 29 of 145
182
1 A. Not only here in the Northern District, middle Georgia,
2 all the way up to Ohio, New York, California. Several
3 different states in the middle, as well as superior courts,
4 Cobb County, Fulton County, Gwinnett County, Clayton County,
5 down to Gwinnett -- or I'm sorry -- down in Glynn County and
6 several other states that are superior court and state courts.
7 Q. And have you ever not been qualified as an expert
8 witness?
9 A. I have never been not qualified.
10 Q. Okay.
11 MS. WEBSTER: So at this point I would move to
12 qualify Mr. Persinger as a digital forensic cybercrime and
13 cellular data expert.
14 MS. CHAIKEN: No objection, Your Honor.
15 MR. MARSHALL: No objection.
16 THE COURT: So admitted.
17 BY MS. WEBSTER:
18 Q. I'm going to give you a binder. Can you look at the
19 binder that's actually already in front of you and turn to
20 F23A.
21 A. Okay. I'm there.
22 Q. And can you tell me what that is?
23 A. Yeah, it's a copy of my resume.
24 Q. And is that a copy that you've provided to me?
25 A. It is.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 30 of 145
183
1 MS. WEBSTER: Your Honor, I move to admit that as
2 Defendant's Exhibit F23A.
3 MS. CHAIKEN: No objection.
4 MR. MARSHALL: No objection.
5 THE COURT: It's admitted.
6 MS. WEBSTER: Thank you.
7 BY MS. WEBSTER:
8 Q. In this case did we ask you to look at some devices that
9 we were provided in discovery?
10 A. You did.
11 Q. What were those devices?
12 A. Well, they consisted of three different types. There was
13 what's called a forensic image of a computer that could
14 include a laptop or a desktop. There was cellphone datas that
15 were coming from a cellphone that were imaged. And then there
16 were SIM cards. The SIM is actually what makes the phone talk
17 to a tower.
18 Q. And did I provide all of those to you on a hard drive?
19 A. You did.
20 Q. Okay. For the laptop, the forensic image, is it -- is
21 that something that a normal person, a layperson, someone
22 without your expertise, can look at and review?
23 A. No.
24 Q. What did you have to do in order to be able to review it?
25 A. So when a forensic image is made, if you would consider a
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 31 of 145
184
1 record, a 33 album record, the needle starts at the outer edge
2 and works its way to the middle as you're listening to the
3 songs.
4 Well, the forensic imaging process is really no
5 different. It starts from the outer edge of the hard drive
6 internally and it records that information into files that
7 then can be reassembled that allows you to analyze the data.
8 Now, at the conclusion of that image, there's a process
9 called hashing. Hashing is the verification process that says
10 the original hard drive matches the forensic image. Now, you
11 have to understand how you can first mount those images and
12 then use forensic software to analyze those forensic images.
13 Q. Is that what you did in this case?
14 A. That is.
15 Q. And after reviewing the devices that you were provided,
16 did you determine how many had relevant information on them?
17 A. I did.
18 Q. And how many had relevant information?
19 A. There was one out of all of them.
20 Q. And was one device encrypted via BitLocker?
21 A. That's correct.
22 Q. So you couldn't get into that one; is that right?
23 A. That's correct. BitLocker today is difficult to get
24 around. If the device is password protected, generally as
25 forensic specialists we can get around that. But BitLocker is
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 32 of 145
185
1 a form of encryption that prevents access to it. So without
2 the key, you can't get into it.
3 Q. And do you remember which device that was?
4 A. Number 8.
5 Q. So did you write a report in this case?
6 A. I did.
7 Q. And did you prepare exhibits with that report?
8 A. I did.
9 Q. Can you look in the binder in front of you and look at
10 Exhibits F23B through T.
11 A. Okay.
12 Q. And are those the exhibits that you prepared to go along
13 with the report?
14 A. They are.
15 Q. Would it help the jury to be able to see these exhibits
16 while you're testifying?
17 A. It would.
18 MS. WEBSTER: Your Honor, I'd move to admit Exhibits
19 F23B through F23T.
20 MS. CHAIKEN: No objection.
21 MR. MARSHALL: No objection, Judge.
22 THE COURT: So admitted.
23 MS. WEBSTER: Okay.
24 BY MS. WEBSTER:
25 Q. So you were talking about the hashing process. Is that
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 33 of 145
186
1 the first thing you did in this case or --
2 A. I don't actually do a hash, I do a rehash. You see, when
3 the government does a forensic image, they first hash it. And
4 like I said earlier, they get a verification. So they provide
5 this hash value to me, I can then take that digital media,
6 that forensic image, rehash it and they should match. So my
7 hash value would match their hash value. That's the first
8 thing to do. And in this case, I did that and they equaled.
9 Q. Okay. And I have on the Elmo what has been marked and
10 admitted as F23B. Is that your exhibit showing that?
11 A. Yes, it is.
12 Q. And what is -- does this just tell you that the
13 forensic -- the image that you have is correct, is a match?
14 A. That's correct.
15 Q. Then what did I ask you to do in this case?
16 A. Well, you gave me some search terms that were basically
17 including an e-mail address and wanted to see if across these
18 devices I could find that e-mail address.
19 Q. And what was the -- what were the e-mail addresses that I
20 asked you to look for?
21 A. It had to do with Tedlin (phonetic/sic) Foster at Yahoo
22 and then another one was Tedlin 23 at iCloud.
23 Q. Okay. And so what was the first thing that you learned
24 about the device?
25 A. Well, outside that they were Windows computers and that
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 34 of 145
187
1 when I put in the search terms, I got returns.
2 Q. And so as to the teldrin_foster@yahoo.com, what did you
3 find?
4 A. I received a positive hit. And I could see that somebody
5 had accessed that e-mail address off of one of the forensic
6 images that I was provided.
7 Q. And what could you tell about the use of that e-mail
8 address?
9 A. Well, the person obviously had to have the username and
10 password. And I could see over a period of time that some of
11 the e-mails were actually being opened, they were being read.
12 Q. And so were you seeing more than just the fact that
13 someone was logged in, or were you seeing that someone was
14 actually using it?
15 A. Somebody was actually using it. And the way you can tell
16 is there's a number count as to how many that are unread and
17 then they change to how many are actually unread. So you know
18 somebody is actually opening the e-mails.
19 Q. Were you able to make any determinations about whose
20 laptop it appeared to be?
21 A. From the information that was provided to me, it was
22 collected at an individual by the name of Darrell Thomas.
23 Q. So it was seized from his house; is that correct?
24 A. That's correct.
25 Q. And were you able to do -- to determine the IP address
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 35 of 145
188
1 that had been used in this case for this device?
2 A. I was.
3 Q. And would seeing Exhibit 4 of your report help you?
4 A. It would.
5 Q. I'm going to put it here.
6 Can you -- sorry, this isn't very clear. Can you see
7 this at all? Not really?
8 A. No, it's too blurry.
9 Q. Let me just give it to you.
10 MR. MARSHALL: What's this exhibit number?
11 MS. WEBSTER: It's actually 3 --
12 MR. MARSHALL: Wait till you get it back. That's
13 fine.
14 MS. WEBSTER: M, I think. It should be M.
15 MR. MARSHALL: Thank you.
16 BY MS. WEBSTER:
17 Q. Does that tell you which IP address was being used?
18 A. Well, it tells me that it's -- first of all, it's a
19 Comcast IP address service provider. And then the IP
20 addresses that were provided, I was able to do a lookup on and
21 see that they are, in fact, related to Comcast.
22 Q. Okay. And can you -- it's on the document, but can you
23 just tell us what the IP address is?
24 A. Yeah. The -- so IPs come in two different flavors. You
25 have what's called an IP4, you have an IP6. And the IP
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 36 of 145
189
1 473.43.127.162. And, again, if I trace that number, it comes
2 back to Comcast.
3 And then the other IP6 is 2601, colon, C as in Charles, B
4 as in boy, colon, 8200, colon, 69D, David, 10, colon, D,
5 David, 2 at foxtrot, colon, 524 A, Adam, colon, A, Adam, 7, A,
6 Adam, A, Adam, colon, 37 at foxtrot 0. And when you do a
7 lookup on that long number, alphanumeric number, it comes back
8 to Comcast as well.
9 Q. Mr. Persinger, were you able to identify that IP address
10 from the device?
11 A. No. Comcast doesn't really store the IP address per se
12 on Windows anymore. They used to and you could see the
13 complete history. Now what we do is we can see that there is
14 a connection made to Comcast that establishes what the
15 computer is using.
16 Q. So where did you get that IP address from?
17 A. It came through discovery.
18 Q. Okay. Thank you.
19 Okay. I'm going to show you what is -- what is admitted
20 as F23N. We'll see if this shows up a little bit better.
21 Is the Exhibit 005, is that your internal exhibit number?
22 A. It is.
23 Q. And at the bottom there's a F23N, which is our exhibit
24 number from court; is that right? Right there?
25 A. Yes.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 37 of 145
190
1 Q. So can you tell us what Exhibit 005 shows?
2 A. So, again, when I put in the teldrin_foster@yahoo, the
3 forensic software has the intelligence to find what's called
4 the string value equivalent. It matches up with this and
5 tells me the data that's around that particular search string,
6 that in this case shows if there was activity that dealt with
7 this business Namerk Painting that shows an e-mail address
8 just below that.
9 Q. So this shows the use of the teldrin_foster@yahoo.com
10 address; correct?
11 A. Correct.
12 Q. And what does it show us about the
13 arcadepaintco03@gmail.com address?
14 A. So in the top part of that document, you'll see where it
15 says file offset and selection. If I send you a letter and
16 you live at 344 Peachtree, I put that on the letter, the
17 envelope, and then mail it. It knows that it's going to your
18 house.
19 That's what those numbers at the top represent. So when
20 I put in the search string and it finds it, it's all related
21 within that house. So we know that that information is
22 directly associated with that Yahoo e-mail address.
23 Q. Okay. Were you able to tell what the person who was
24 interacting with the Yahoo e-mail address was doing at the
25 time?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 38 of 145
191
1 A. I could see there was documents that were being
2 exchanged. Again, the e-mails were open. There were some
3 that indicated sent. But they were mainly documents that were
4 related to that e-mail address.
5 Q. Okay. And did you see something about a Bellator Phront
6 Group bank statement?
7 A. I did.
8 Q. So I'm showing you what's marked as F23O. And is this
9 that -- your internal exhibit that you prepared to go with
10 this report?
11 A. It is.
12 Q. And what were you able to determine about the accessing
13 of the Bellator Phront Group bank statement?
14 A. Well, in Exhibit Number 4, it mentions this information.
15 So I see in 5 is directly correlated to that e-mail address.
16 Q. Going back to this for a second. Is it this account
17 number, is that what we're looking at?
18 A. It is.
19 Q. Okay. And so because you saw that, you knew that it was
20 associated with this document; is that right?
21 A. That's correct.
22 Q. Okay. And so could you tell what was being done with it
23 or could you just tell they were accessing it?
24 A. Well, because I was able to find it on the system, I knew
25 factually it was accessed. What they did with it thereafter,
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 39 of 145
192
1 I don't know.
2 Q. And so were you able to tell how often the Yahoo e-mail
3 address was being used?
4 A. Within a limited scope. You see, even though the
5 computer is like a sponge and it records lots of information,
6 it doesn't really do a repetitive action. It doesn't continue
7 every time that you open it. It could be that an individual
8 would leave the browser open, for example, and that record is
9 already on the computer, so it doesn't have a need to repeat
10 that because it still sees that it's opened.
11 Q. So does that mean there would be a log of every time
12 someone accessed the Yahoo account?
13 A. Not every time. Again, it's all dependent on what the
14 user does. If the user closes the browser and is forced to
15 log in each time, yes, you would find a new record to that
16 effect. But if you keep that tab open, then the computer just
17 says it's open and doesn't continue to record at that point.
18 Q. And what if someone stays logged in, has the box that
19 says "stay logged in" on this computer, what effect does that
20 have on that analysis?
21 A. Yeah, there's really two versions of that. There's stay
22 logged in or remember me. And we do this because we don't
23 want to have to put the username and password in every time,
24 we just want to read our e-mail.
25 When you check that box, it then treats it as you're
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 40 of 145
193
1 friendly to the system. Meaning that every time you open that
2 browser and you go to that e-mail address, it's automatically
3 going to log you in and not require you to do it again.
4 Q. Okay. So I'm going to show you what's been marked as
5 F23E.
6 Can you tell me what this is?
7 A. So this is one of the exhibits where I can actually see
8 what's called "recent documents." It's also called MRUs. And
9 MRU is most recently used. So it keeps up with a person's
10 history as to what they're clicking. And it simply does this
11 so that the process is sped up.
12 If you're opening up an Excel spreadsheet and you go to
13 that spreadsheet often, then through this process it knows
14 exactly where that information is and can quickly load it for
15 you so that you can see the content. And that's why we see --
16 over to the left of the document it's telling us this numeric
17 value. That's the order of which things are actually being
18 opened.
19 Q. And so when it has -- can you tell us what's in the row
20 labeled 107?
21 A. So in 107 you'll see the parentheses 1,790 unread, the
22 teldrin_foster@yahoo.com e-mail address. So that's saying
23 that out of the list, this has been part of the most recently
24 opened files.
25 Q. And now I'm going to show you part of what's been marked
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 41 of 145
194
1 as F23I. This is going to be a little bit harder to read, but
2 can you -- can you see that or is it still too blurry? Still
3 a little blurry?
4 A. Still a little blurry. It's almost like an eye test.
5 Q. Let me just give it to you.
6 You have it in front of you. 23I?
7 MS. WEBSTER: Ms. Holland, could you pull up RF23I?
8 I hear you have our exhibits in your Trial Director, so thank
9 you. And can you pull out that -- sort of the top half of it.
10 Right there.
11 THE WITNESS: I've yet to find it.
12 MS. WEBSTER: No. No. She's doing it.
13 Yes, just over from there. Thank you so much.
14 THE WITNESS: Oh, much better.
15 BY MS. WEBSTER:
16 Q. Okay. Do you see it on the screen?
17 A. I do.
18 Q. So I think you mentioned earlier you could see that some
19 of the unread e-mails in this were changing; is that right?
20 A. Correct.
21 Q. So what does that tell you?
22 A. Again, if you look at even the top row, the 2,044, and
23 you go down to about the middle, it's 2,098, and then it goes
24 back to 45. This is highly suggestive that somebody is
25 actually opening the e-mails and reading them.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 42 of 145
195
1 Q. So it's not just it's logged in and it's cataloging them;
2 right? It's just -- it's someone is actually in the account;
3 is that right?
4 A. That's correct. It's got some human interaction with it.
5 Q. Okay. And were there other instances on this exhibit
6 where this -- well, first, let me ask, what is the date of
7 this access?
8 A. Well, they go between June 24th, 2020, there's June 30th.
9 You see, again, the job of the Internet history that's on your
10 system, it will purge over time. So it doesn't keep up with
11 every instance. This is the most current instance that you
12 would see in it.
13 Q. And do you recall seeing other dates listed that someone
14 had accessed this e-mail account?
15 A. Yes, I did.
16 Q. But you -- I just want to be very clear. You're not able
17 to say for sure exactly when all the instances were that that
18 e-mail address was accessed; is that right?
19 A. That's correct.
20 Q. And then what else did I ask you to look for on this
21 device?
22 A. The reference to the iCloud account.
23 Q. One second before we go there.
24 MS. WEBSTER: Can you take out the cull-out part,
25 portion.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 43 of 145
196
1 BY MS. WEBSTER:
2 Q. Do you see what else people are searching for under the
3 Yahoo references?
4 A. Yes, I see that.
5 Q. And what are they searching for?
6 A. Fonts, different fonts.
7 Q. Okay. Thank you. Okay. Going back to the iCloud
8 account.
9 What did I ask you to search for?
10 A. It was teldrin23, the best I remember, @icloud.com.
11 Q. And what did you find?
12 A. I got positive returns on it.
13 MS. WEBSTER: And can we pull up F23R, please.
14 BY MS. WEBSTER:
15 Q. Is that an exhibit that you prepared about the
16 teldrin23@icloud.com account?
17 A. It is.
18 Q. Tell us what that shows you.
19 A. On Windows it has several different event logs,
20 everything from application to updates to the overall health
21 of the system to security. When you log into something,
22 generally that information will appear in the security event
23 log. So when I did my search using that search string of
24 teldrin23@icloud, I got hits that didn't surprise me because
25 they were in the event viewer log of security.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 44 of 145
197
1 Q. And is this what we're seeing in this exhibit?
2 A. I'm sorry, say that again, please?
3 Q. Are we seeing that event viewer log match in this
4 exhibit?
5 A. That's correct. So working left to right, you can see
6 when the event took place, the date, the time, the event ID
7 number, the computer name, and then the source, and what's
8 inside that event viewer log file.
9 Q. And what time was this event file created?
10 A. It's at 12:20 and 45 seconds a.m. on the 22nd of
11 May, 2020.
12 Q. And what you told us earlier about the Yahoo account,
13 that you can't necessarily see every time that it's been used,
14 is that also true of the iCloud account?
15 A. It is.
16 Q. And is it for the same reasons?
17 A. Yes.
18 Q. So we know that it was logged in on May 22nd of 2020, but
19 we don't know when else it was used; is that right?
20 A. That's correct.
21 Q. Let me go back for a second. How did you find this
22 information? Were you using publicly-available software or
23 were you using your own custom software?
24 A. Well, the software I use is called Forensic Explorer.
25 And it's written in a programming language called Delphi.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 45 of 145
198
1 I've used Delphi for 20-plus years. And it allows you to
2 write your own scripts.
3 Now, sometimes I'll use custom scripts, especially in
4 cases where I can potentially save the client money or the
5 court money because the process is streamlined. It's going to
6 condition the information, without changing it, into something
7 that we can all see, such as this here in this exhibit.
8 And that custom script allows it to still run through,
9 still bookmark and find elements that match the search string
10 that I'm looking for.
11 Q. Okay. And so -- but the results of the custom script,
12 were you able to confirm that with more publicly-available
13 software?
14 A. Yes. So there's a couple different ways that this can be
15 done. There are what's called stock scripts, the software
16 actually comes equipped to do the very same thing that I
17 detailed to you, it just doesn't look as good or doesn't save
18 as much time.
19 But you can also extract what's called the native digital
20 file. That means the event viewer file itself, you can
21 extract it from the forensic image and then look at it with a
22 number of different tools. Microsoft actually has one that
23 you can download and import into it this event viewer log
24 file.
25 Q. Okay. So regardless of whether you used the custom
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 46 of 145
199
1 scripts that you made or the more publicly-available software,
2 it confirmed that you had found these e-mail addresses used on
3 this computer; is that accurate?
4 A. That's correct. It's kind of a validation. You find it
5 one way using one tool, you want to see if you can find it
6 again using a second tool.
7 Q. And are you familiar with an IEF report?
8 A. I am.
9 Q. Tell us what that is.
10 A. So the forensic software is called Magnet. It's actually
11 changed names a couple of times. It's built by a retired
12 police officer out of Canada that pretty much puts things in
13 auto pilot. You point it at the forensic drive, it has a
14 bunch of boxes that are checked, you tell it to run. In about
15 two days you come back and you've got your results.
16 Q. And do you get to select what's in the IEF report? Like
17 does it include everything on the device or only certain
18 things that you choose?
19 A. It usually ships with everything checked.
20 Q. Were you able to briefly look at the IEF report that was
21 provided in this case?
22 A. Briefly, yes.
23 Q. About this device?
24 A. Yes.
25 Q. And were there things that were not included in that IEF
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 47 of 145
200
1 report?
2 A. Correct.
3 Q. What were those things that weren't included?
4 A. The primary thing was the event logs. Again, the logs
5 are kind of a tattletale. It's keeping up with what you're
6 doing and when you've done it. And the particular report I
7 looked at did not have that contained.
8 Q. I mean, there could be valid reasons for not including
9 that; is that right?
10 A. There could be, yes.
11 Q. If you did not have those logs, would you be able to see
12 the teldrin23@icloud.com?
13 A. You could not.
14 Q. So that was only in those logs?
15 A. That's correct.
16 Q. And later have you been able to look at the full event
17 logs that we were provided in discovery?
18 A. Yes. There were two PDFs. One about 2,200 pages and the
19 one a little over 16,600 pages.
20 Q. Did they confirm or deny what you had found in the --
21 already?
22 A. It confirmed. I was able to put in the same e-mail
23 address and in those log files they were found.
24 Q. So you can tell that these e-mail addresses were used,
25 but just to be clear, can you tell for certain who was using
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 48 of 145
201
1 the computer at that time?
2 A. No, I cannot.
3 Q. Was the information that you saw in the report consistent
4 with a sort of one-time use or did it look like it was someone
5 who was using it repeatedly?
6 A. I would say had used it more than once.
7 Q. And you said, I think, in your opinion that you thought
8 that it looked like the user was familiar with how to access
9 the account and having access to the username and password; is
10 that right?
11 A. Correct.
12 Q. Why is that your opinion?
13 A. Well, the information seemed almost too easy to find.
14 Putting in the search criteria and getting -- the results came
15 back didn't tell me that a person struggled with trying to
16 enter in a username or a password, it was readily available.
17 Q. And once the e-mail is logged into the computer, is there
18 any limitation on who can access it?
19 A. Not really. Again, you just have to have physical access
20 to it, launch the browser, see what the history may say, click
21 a link. If you have remember me checked, it's going to take
22 you to it.
23 Q. And were you able to -- or did we ask you to review the
24 metadata from documents on this device?
25 A. You did.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 49 of 145
202
1 Q. And were you able to do that?
2 A. I did.
3 Q. And --
4 THE COURT: Ms. Webster, let me interrupt you. I'm
5 sorry. We've had a request from someone for a comfort break.
6 So if you get to a stopping point in the next few minutes,
7 could you do that, please?
8 MS. WEBSTER: Absolutely. I can ask one more
9 question.
10 THE COURT: All right.
11 BY MS. WEBSTER:
12 Q. Did you find documents that had Gena Pyfrom's metadata on
13 it?
14 A. I did.
15 Q. And do you remember how many documents?
16 A. I don't recall.
17 MS. WEBSTER: That's fine. Thank you. We can stop
18 here.
19 THE COURT: Very well.
20 Let's try to take a break on the shorter end of our
21 breaks, everyone, okay? Closer to five than ten, if we can
22 all kind of hustle?
23 All right. Thank you. You're reminded of your
24 instructions for breaks. Thank you.
25 (The jury exited the courtroom at 3:22 p.m.)
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 50 of 145
203
1 (After a recess at 3:23 p.m., the proceedings
2 continued at 3:31 p.m. as follows:)
3 THE COURT: You can bring the jury out, Officer.
4 (The jury entered the courtroom at 3:31 p.m.)
5 THE COURT: Y'all can be seated. Thank you.
6 Off the record.
7 (Off-the-record discussion.)
8 THE COURT: Back on the record.
9 MS. WEBSTER: Thank you, Your Honor.
10 BY MS. WEBSTER:
11 Q. Mr. Persinger, are you familiar with the concept of Apple
12 Continuity?
13 A. I am.
14 Q. What is that?
15 A. So Apple, obviously, came out with Apple Continuity. And
16 what it does is it allows multiple Apple devices to
17 communicate with each other so that if you're working on an
18 iMac, for example, on a Word document and it's at work and you
19 leave and you go home, well, if you've got a computer at home,
20 you can resume working on that document. And the idea is to
21 sync these devices all together so that you don't lose your
22 connectivity of whatever you're working on.
23 Q. Okay. So you gave an example of computers, but does that
24 also apply between different types of devices?
25 A. It is. It includes from the watch to the iPad to the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 51 of 145
204
1 iPod to the cellphone. All the Apple devices.
2 Q. So if I'm logged in with the same Apple ID on a phone and
3 a tablet, for example, what happens?
4 A. Well, they're going to sync together. You're going to
5 have very similar data on one device as the other device.
6 Q. And can you receive phone calls on a tablet if it's
7 linked to your phone?
8 A. You can.
9 Q. What about on a watch?
10 A. You can.
11 Q. And can WhatsApp be logged into on a tablet?
12 A. It can.
13 Q. Do you know how that works?
14 A. I'm sorry?
15 Q. How would that work, if WhatsApp is logged into a tablet?
16 A. So once you do your credentials of logging into it and
17 leave it running, then if you do something on another device,
18 that information's going to be on that other device on that
19 WhatsApp app.
20 Q. So is it possible for someone to be messaging to someone
21 from a tablet on WhatsApp?
22 A. Yes.
23 Q. What if you have a phone that sort of isn't connected to
24 a phone number but you have -- you're still logged in on Wi-Fi
25 to an Apple ID, are you still logged in? Could you still
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 52 of 145
205
1 access WhatsApp and other applications that rely on the
2 Internet?
3 A. Yes. And that's the key. As long as it has network
4 through the Internet connectivity, Apple Continuity is going
5 to continue to work. Even if it doesn't have an active phone
6 number, you can still use it to communicate back and forth and
7 receive information from other sources.
8 Q. If you are logged in on a watch, are you required to have
9 your phone close by in order for that watch to work?
10 A. It's an optional thing. As long as the watch has
11 Internet connection, it will still receive phone calls. It
12 will still receive text messages. It used to be, before Apple
13 Continuity, you had to have the two devices together, they
14 paired. And now, because of Apple Continuity, they can be in
15 different locations physically and still communicate.
16 Q. Is that true for a tablet as well?
17 A. It is.
18 Q. Like an iPad?
19 A. It is.
20 Q. Do you know how that type of call would show up on cell
21 site records?
22 A. Usually what the provider requires is to have an active
23 account, that's what's called the IMEI, International Mobile
24 Equipment Identifier. It is a unique serial number equivalent
25 to the provider. As long as there is an active IEMI (sic),
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 53 of 145
206
1 then the devices that you allow to connect to your iCloud
2 account and through Apple Continuity, all the devices are
3 going to now connect. So if you get a phone call and you want
4 to answer it on a pad in a different area, as long as they
5 both have connectivity, you can do that.
6 Q. Okay. And so are you able to tell what device the calls
7 are coming from or being answered on?
8 A. Generally, no. Because, again, what the provider cares
9 about is that active IMEI number. That's the reporting device
10 to the provider.
11 Q. In this case did you have a chance to review the cell
12 site report that was provided by the government's expert?
13 A. I did.
14 Q. And are you familiar with cell tower records as well?
15 A. I am.
16 Q. Have you reviewed these types of records before?
17 A. I have.
18 Q. About how many times?
19 A. I don't know. Low hundreds. 200 times. Just about
20 every case now has somebody's cellphone records in it.
21 Q. And have you done the mapping of cell site pings and
22 things like that?
23 A. I have.
24 Q. What is the purpose of this sort of analysis?
25 A. Well, the big thing to remember about cellphone tower
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 54 of 145
207
1 technology, it wasn't put in place to be a tracking device.
2 It's not GPS. It is for billing purposes. The cellphone
3 provider wants you connected. That's the bottom line. And to
4 keep that connectivity going to the tower, the tower -- the
5 job of the tower is to do that, to make sure you stay
6 connected.
7 Q. You've reviewed the report; is that right?
8 A. I did.
9 Q. And so do you remember how it's marked with various
10 towers on the report?
11 A. Yes, I do.
12 Q. And are you able to tell from the report whether those
13 towers are actually working?
14 A. No.
15 Q. And why not?
16 A. Towers are just like everything else electronic. It will
17 go down. They will have issues. They do one of two things,
18 either have service updates or maintenance updates done to it,
19 for that reason, because towers can actually go offline.
20 Towers can actually be deconstructed and put out of service
21 permanently and something close by may be built to replace
22 that tower. So service and maintenance records are
23 exceedingly important to know the condition of that tower.
24 Q. And if they -- I mean, if the tower is pinged on the
25 report, is that evidence that it's working and everything is
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 55 of 145
208
1 going smoothly?
2 A. No.
3 Q. And why not?
4 A. Again, because towers can fail. They can also have a
5 situation with what we call overcrowded. Remember, the job of
6 an Internet -- or the cellphone provider is to keep you
7 connected. And if a tower is overloaded, it's going to put
8 you on to a completely different tower.
9 So that tower, that new tower now's job is keep you
10 connected. And as you move, it may snap you to another tower.
11 But the thing to remember is that that tower's job has to keep
12 you connected because what a provider hates more than anything
13 is for dropped calls to happen, dropped calls, unhappy
14 customer, customer then goes to another provider.
15 Q. We heard earlier that if there was overcrowding on a
16 tower, that the call would still register or the records would
17 still reflect the initial tower hit. Is that your opinion or
18 your understanding?
19 A. No, it's not.
20 Q. And why not?
21 A. So to get in the weeds of this, the tower, once it's
22 achieved its ultimate capacity, it can't handle any more
23 callers, it actually goes back to what's called the switch,
24 the switch is located at the provider, and says I'm full.
25 Take a glass that holds 16 ounces, it can't take another drop
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 56 of 145
209
1 of water. It's full.
2 So as it reports back to the provider, it says I'm full,
3 the -- the switch's job now is to find another tower that's
4 close by. So as a phone call is made and it sees this tower
5 that's full, it automatically is going to switch over.
6 Because if you think about if that tower that's full can't
7 handle you and it redirects you, what happens to billing? We
8 know that if we use a phone for ten minutes, it's on the tower
9 that it's talking to, not where it was bounced from. That's
10 because the switch has redirected that user to use that tower
11 that has the capabilities to do so.
12 Q. Okay. And based on the report, are we able to know which
13 towers were potentially overloaded or not at the time?
14 A. We don't.
15 Q. And is that important to know?
16 A. It's -- again, yeah, it's important because if we're
17 relying on the cellphone to be talking to a particular tower
18 to try to put an individual within the radius of that tower,
19 we need to have some assurance that that tower is operating
20 perfectly as it was designed to do.
21 Q. Is that a thing that you can know, whether the tower was
22 overloaded at the time?
23 A. Only if you were monitoring the tower at the time.
24 Q. What is a secondary tower?
25 A. So the secondary tower is the one that actually ends up
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 57 of 145
210
1 with the call. It's the one that's handling it.
2 Q. So that's the one that would be on the report?
3 A. Generally. Because, again, once the tower that's full
4 puts you to that secondary tower, that's when your minutes
5 start. We may remember that back in the day the providers
6 were charging us by the minute because they were -- the towers
7 were incorporated for billing purposes. So when it bounced
8 you over to that other tower is what we call snapping, when
9 you snap over to that other tower, that's when your billing
10 starts.
11 Q. Are you familiar with the mapping software used by the
12 FBI?
13 A. I am.
14 Q. Do you have access to it?
15 A. It's a commercially available that I think law
16 enforcement exclusively can only obtain -- I've had it in
17 cases before, so I don't have a copy. I actually have my own
18 software.
19 Q. Are you able to assess the software to determine if it
20 was working?
21 A. No, I cannot.
22 Q. Okay. Are tower records normally produced by the carrier
23 when cell site information is requested?
24 A. I'm sorry, restate the question, please.
25 Q. The list of towers, is that normally provided by the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 58 of 145
211
1 carrier or is that something you normally get from somewhere
2 else?
3 A. So generally the job of the provider is, yes, to keep up
4 with its towers. So when you send a subpoena to the provider
5 for records, you will get cell tower information that will
6 provide you latitude and longitude as to where that physical
7 location of the tower is.
8 Q. Okay. Do -- we heard testimony earlier about sectors for
9 cell site analysis. Do you know what I'm talking about?
10 A. I do.
11 Q. Can you explain that briefly? Just remind us.
12 A. Basic towers have three sectors, each by division of
13 120 degrees, making a full circle of 360. You have the alpha,
14 the beta and the gamma. Generally the alpha's job is pointing
15 more at the 0 or the 360, going northbound. And then it just
16 takes 120 degree turns to make each one of those sectors.
17 MS. CHAIKEN: Your Honor, may we approach briefly?
18 THE COURT: Yes.
19 (Bench conference commenced with the court reporter
20 present.)
21 MS. CHAIKEN: Your Honor, I've given a lot of leeway
22 on this line of questioning, but these are all undisclosed
23 opinions. The report was about the device, it's about Darrell
24 Thomas's device. There's not a single word on it about him
25 being a rebuttal expert on cell site analysis. None of what
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 59 of 145
212
1 he's testifying about, and has been testifying about for the
2 past ten minutes, has ever been disclosed to us as something
3 he's going to testify about.
4 MS. WEBSTER: Well, as you know, Your Honor, we did
5 not get the report until two weeks before trial. And I don't
6 think rebuttal testimony is required to be disclosed in the
7 same way that evidence is. So this report that he testified
8 to initially was produced on our case-in-chief or was produced
9 before we even --
10 THE COURT: Maybe just talk a little bit lower. The
11 whole idea is that they can't hear us.
12 MS. WEBSTER: Sorry. Sorry.
13 So it was part of our -- our report was disclosed
14 prior to getting the government's report. So obviously it
15 doesn't include rebuttal testimony because it was disclosed
16 first. And so I don't think that Rule 16 requires us to
17 disclose rebuttal opinion, especially given the time frame in
18 which we received the government's expert.
19 MS. CHAIKEN: Your Honor, Rule 16 requires disclosure
20 of expert records, whether they're in rebuttal or not.
21 Obviously we wouldn't have been able to complain if they gave
22 it to us three days ago because we gave them our report three
23 weeks ago. But they've obviously known before ten minutes ago
24 that their expert was going to offer opinions in response to
25 our expert.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 60 of 145
213
1 And unlike them, who had an hour to speak to our
2 expert on the phone earlier this week and find out exactly
3 what he was going to say and why and how he got there, we
4 didn't even know that he was planning on even talking about
5 cell site analysis.
6 MS. WEBSTER: Rule 16 doesn't require -- he has not
7 written a report, so there is no report. So it only
8 requires --
9 THE COURT: What's that? What were you saying,
10 Ms. Chaiken?
11 MS. CHAIKEN: So they're undisclosed opinions. The
12 fact that he didn't write a report about them, that's the
13 whole point. Rule 16 requires disclosure of the expert's
14 opinions.
15 THE COURT: All right. I want to just sit down where
16 I can look at the documents and talk to you all about this.
17 I'm going to send the jury back.
18 MS. CHAIKEN: Thank you.
19 (Bench conference complete.)
20 THE COURT: Ladies and gentlemen of the jury, I just
21 had a brief bench conference with counsel, but I think it's
22 something not quick and easy, so I'm going to need to talk
23 with them, look at all the documents and et cetera. So that's
24 going to necessitate my sending you back to the jury room.
25 Okay? Sorry.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 61 of 145
214
1 (The jury exited the courtroom at 3:48 p.m.)
2 THE COURT: And if I could have the witness step out
3 of the courtroom, please. Thank you.
4 (Witness excused from the courtroom.)
5 THE COURT: Y'all can be seated. Thank you.
6 All right. We had already started our discussion in
7 a bench conference, but I just wanted to hear from you in more
8 detail about this. And it didn't look like it was going to be
9 a quickie over at the bench conference, so let's expand on it
10 a little bit.
11 Ms. Chaiken, what do you think they should have done
12 and why do you think they should have done it, first off?
13 MS. CHAIKEN: Your Honor, Ms. Webster has said she's
14 almost done at this point. We just want to move on and wrap
15 it up. So if she's close to being done, rather than waste
16 time, you know, talking --
17 THE COURT: Okay.
18 Ms. Webster, how much more do you have on this line
19 of questioning?
20 MS. WEBSTER: Not long, Your Honor. Less than five
21 minutes. Maybe less than three.
22 THE COURT: All right. Sounds like the government's
23 withdrawing their objection based on that representation.
24 Therefore, we'll see where we end up. Okay. Very well.
25 Officer, if you can please bring back out the jury.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 62 of 145
215
1 Thank you.
2 (Witness recalled to the witness stand.)
3 (The jury entered the courtroom at 3:55 p.m.)
4 THE COURT: All right. Y'all can be seated.
5 I understand the objection is withdrawn and,
6 Ms. Webster, you're going to move on. Thank you.
7 MS. WEBSTER: Thank you.
8 BY MS. WEBSTER:
9 Q. How far -- I want to talk about the distance that the
10 towers reach. Does that make sense?
11 A. It does.
12 Q. And so how far out from the tower will it collect phone
13 calls or receive phone calls? Does that make sense?
14 A. Yeah. Generally it's three to seven miles.
15 Q. Okay. And how do you know that?
16 A. Case experiences.
17 Q. Okay.
18 A. And part of CATIE, the Capture and Track Investigative
19 Evidence, I spent a lot of time studying towers.
20 Q. And is that what's informed your opinion as to how far
21 out they reach?
22 A. Yes.
23 Q. And if other people -- do some other people believe that
24 the distance is much shorter?
25 A. Yes.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 63 of 145
216
1 Q. And what accounts for that difference in opinion?
2 A. I -- I don't know why they have a difference of opinion.
3 It could be that they just don't know the tower's abilities.
4 Towers are really kind of regulated by FCC, the Federal
5 Communications, and if you don't go there, you don't
6 necessarily learn the output of a tower.
7 Q. So you have to go to the FCC to learn their full
8 capability; is that what you're saying?
9 A. That's where a lot of it is kept, yes.
10 Q. And is the -- when you have more towers in an area, does
11 that shorten the range that the tower will reach?
12 A. It doesn't necessarily shorten it, it just gives you
13 better coverage. If you think about watering your lawn, your
14 sprinklers are designed to water the lawn, but some sprinklers
15 may actually put out more water than other sprinkler heads
16 will.
17 The towers are very similar to that. They do try to
18 cater to a little heavier populations, so it might have more
19 output, where something that's more rural may not.
20 Q. And does the cell tower analysis, does that provide for
21 any exact locations?
22 A. No. It's approximate at best.
23 Q. And is there sort of, like, a radius that it's within or
24 how do we know?
25 A. Well, that's that three- to seven-mile radius that we're
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 64 of 145
217
1 talking about. It's generally within that area. It's not
2 GPS. GPS is certainly going to get you within 50 feet. The
3 tower is just putting out signal to keep you connected.
4 Q. So can we tell exactly where the phone is?
5 A. No.
6 Q. And can you tell who was in possession of the phone?
7 A. No.
8 Q. Or any other device that's potentially being used?
9 A. No.
10 MS. WEBSTER: Can I have one second, Your Honor?
11 THE COURT: Yes.
12 MS. WEBSTER: We have no further questions at this
13 time.
14 THE COURT: Any cross?
15 MS. CHAIKEN: Yes, Your Honor. Thank you.
16 THE COURT: Go ahead.
17 CROSS-EXAMINATION
18 BY MS. CHAIKEN:
19 Q. Good afternoon, Mr. Persinger.
20 A. Good afternoon.
21 Q. My name is Tal Chaiken, I'm one of the prosecutors. It's
22 nice to meet you.
23 A. Nice to meet you.
24 Q. Did you previously prepare a report in this case?
25 A. I did.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 65 of 145
218
1 Q. And as far as your examination of Darrell Thomas's
2 laptop, did your report contain all of the opinions you formed
3 in this case?
4 A. The best I recall, yes.
5 Q. And did you include all of the exhibits that you thought
6 were important and relevant to your opinion in that report?
7 A. I -- I'm sorry. Yes, I did. And I believe, if I recall
8 correctly, I did a supplemental report as well that included
9 references to some of those exhibits.
10 Q. Just to be clear, you're not giving an opinion in this
11 case as to who was using Darrell Thomas's device at any given
12 time; correct?
13 A. That's correct.
14 Q. You don't know whether Teldrin Foster and Darrell Thomas
15 worked on that laptop together, do you?
16 A. I do not.
17 Q. You're not offering an opinion about how Teldrin Foster's
18 Yahoo account ended up on that device, are you?
19 A. I'm only saying I know somebody had the username and
20 password. Beyond that, no.
21 Q. You don't know whether that person who had the username
22 and password was Teldrin Foster himself; correct?
23 A. That's correct.
24 Q. You don't know whether Teldrin Foster gave Darrell Thomas
25 the username and password to log the account in; correct?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 66 of 145
219
1 A. That's correct.
2 Q. You don't know whether Teldrin Foster was there with
3 Darrell Thomas and they logged into it together; correct?
4 A. That's correct.
5 Q. Now, in this case your assignment was to examine devices
6 that were seized from Darrell Thomas's residence; correct?
7 A. Correct.
8 Q. And how did you determine which devices you would
9 examine?
10 A. I started off by mounting all of them that I could, with
11 the exception of number 8. And because I had the search
12 criterias, I put those in on the devices. And when I received
13 a match, that was the drive that I focused on.
14 Q. How many devices did you receive to mount?
15 A. Best I recall, about 10. May have been 11.
16 Q. And in your report you specifically identified four
17 devices. You identified 1B8; correct?
18 A. That's correct.
19 Q. That's Darrell Thomas's laptop?
20 A. I believe so, yes.
21 Q. And you identified 1B15 as the BitLocker hard drive, the
22 hard drive that was encrypted using BitLocker; correct?
23 A. That was number 8.
24 Q. QAT08?
25 A. That's correct. The FBI assigns kind of a different
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 67 of 145
220
1 numbering sequence.
2 Q. And you reviewed QAT09; correct?
3 A. I did.
4 Q. And you found no evidentiary data there?
5 A. Correct.
6 Q. And you reviewed QAT10; correct?
7 A. That's correct.
8 Q. And you reviewed -- you didn't find any evidentiary data
9 there; correct?
10 A. Correct.
11 Q. In your work is it important to analyze whatever devices
12 are available to analyze?
13 A. That I can get into, yes.
14 Q. And that's because if you don't examine all of the
15 devices that may have relevant evidence, your analysis would
16 be incomplete; correct?
17 A. Well, it wouldn't be necessarily incomplete. When the
18 government gives me what they believe are devices that they've
19 analyzed or made forensic images of, then that's the scope of
20 my work.
21 Q. And you can only offer opinion based on evidence you've
22 looked at; correct?
23 A. Correct.
24 Q. And if there's evidence you haven't examined, you don't
25 know how that evidence would impact your opinions; correct?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 68 of 145
221
1 A. Correct.
2 Q. And in this case you did not review Darrell Thomas's
3 cellphone, did you?
4 A. I did not.
5 Q. Why did you not review that cellphone?
6 A. I believe I didn't see any evidence that the government
7 did as well. A lot of times when I'm on the side of defense
8 it's to analyze what the government believes is its best
9 evidence.
10 Q. Did you ask Ms. Webster whether the government had
11 analyzed Darrell Thomas's cellphone?
12 A. I don't recall if I asked her or not. In the course of
13 my business, I would ask normally, but I don't know if I did
14 in this case.
15 Q. And you're familiar with Cellebrite; correct?
16 A. I'm sorry, say it again, please.
17 Q. You're familiar with Cellebrite?
18 A. I am.
19 Q. And you've used Cellebrite in your work?
20 A. I have it, yes.
21 Q. And it's a reliable software for extracting data from a
22 cellphone; correct?
23 A. Lately, no. I've actually had four iPhones, I've got
24 support tickets to support that, that it has failed on. So
25 I'm now using one of our proprietary tools to try to analyze
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 69 of 145
222
1 those.
2 Q. Okay. And if Cellebrite does not fail, it extracts data
3 from a cellphone; correct?
4 A. Then it does correctly, yes.
5 Q. And in this case you were not given a Cellebrite
6 extraction for Darrell Thomas's phone?
7 A. Correct.
8 Q. Did you review any devices belonging to your client,
9 Teldrin Foster?
10 A. I did not.
11 Q. You didn't review his cellphone?
12 A. I did not.
13 Q. You didn't review any of his computers?
14 A. I did not.
15 Q. Now, you examined Darrell Thomas's laptop; correct?
16 A. That's the QAT02, yes.
17 Q. And that was a Lenovo laptop; correct?
18 A. Best I recall, yes.
19 Q. It was not an Apple device; correct?
20 A. Correct.
21 Q. You offered some opinions about Apple Continuity and how
22 it works across watches and iPhones and iPods and iPads and
23 things like that; correct?
24 A. Correct.
25 Q. But in this case you did not review any device that was
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 70 of 145
223
1 an Apple device; correct?
2 A. The only things I did were the SIM cards. And they
3 were -- the best I recall, belonged to an Apple device, but
4 not the devices themselves.
5 Q. And you did not identify any Apple device in this case
6 that has Apple Continuity on it; correct?
7 A. Correct.
8 Q. Okay. So you were just generally telling the jury that
9 Apple Continuity is something that exists, right, and how it
10 works?
11 A. Yes.
12 Q. Okay. But that's not something that has any relevance to
13 any device you looked at in this case?
14 A. No.
15 Q. Now, when -- I want to be clear that you were asked to
16 look for two different accounts on Darrell Thomas's device;
17 correct?
18 A. Across all devices.
19 Q. And you found those on one device, the laptop; correct?
20 A. That's correct.
21 Q. So can we limit our conversation now to the laptop?
22 A. Yes.
23 Q. So you were asked to look for the
24 teldrin_foster@yahoo.com account; correct?
25 A. Yes.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 71 of 145
224
1 Q. And for the teldrin23@icloud.com account?
2 A. That's correct.
3 Q. Okay.
4 MS. CHAIKEN: If you could please publish Defense
5 Exhibit F23I, Ms. Holland.
6 BY MS. CHAIKEN:
7 Q. This is one of the exhibits that you prepared; correct?
8 A. Yes, it is.
9 Q. And it shows log-ins or accesses to the Teldrin Foster
10 Yahoo account on Darrell Thomas's device; correct?
11 A. Correct.
12 MS. CHAIKEN: And if you could go down to page 4,
13 Ms. Holland.
14 BY MS. CHAIKEN:
15 Q. Do you see there there's -- May 19th, 2020, there is a
16 log-in to Yahoo? That's the earliest log-in to the Yahoo
17 account that you found on Darrell Thomas's device; correct?
18 A. It appears so, yes.
19 Q. So before May 19th of 2020, you didn't find anything on
20 Darrell Thomas's device related to this Teldrin Foster Yahoo
21 account; correct?
22 A. Correct. But, again, the Internet history that is stored
23 within the data does what we call FIFO, first-in, first-out.
24 So it flushes anything that may have been older to get ready
25 for the newer data that's coming in.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 72 of 145
225
1 Q. And you just don't know whether it was there or not
2 before; correct?
3 A. That's correct.
4 Q. You have no -- you haven't seen anything in the device to
5 show that it was there before May 19th; correct?
6 A. Correct.
7 Q. Okay. Now, you -- your examination of Darrell Thomas's
8 computer didn't identify any evidence of hacking; correct?
9 A. It did not.
10 Q. You did not identify any evidence that the password for
11 the account was changed?
12 A. I did not.
13 Q. You did not identify any evidence that the security
14 questions were changed?
15 A. I did not.
16 Q. You did not identify any evidence that the contact
17 information was changed; correct?
18 A. I did not.
19 Q. Okay. You found evidence that someone who knew the
20 username and password logged into the account on Darrell
21 Thomas's device; correct?
22 A. That's correct.
23 Q. And, again, you don't know who that was; right?
24 A. That's correct.
25 Q. For example, if I'm working on a document in my office
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 73 of 145
226
1 and you examined my computer, you'll see that I created that
2 document; right?
3 A. Yes.
4 Q. You'll see that there's a document on my computer; right?
5 A. Correct.
6 Q. But that doesn't tell you whether Mr. Kaushal and
7 Mr. Moore were standing in the office with me and we were
8 working on it together; right?
9 A. That's correct.
10 Q. Okay. All you know is it's on the computer but not who
11 had anything to do with it?
12 A. That's correct.
13 MS. CHAIKEN: Now, if you could go to F23C, please.
14 BY MS. CHAIKEN:
15 Q. This was a bank statement that you attached as an exhibit
16 to your report; correct?
17 A. Yes.
18 Q. And can you just tell me again what your opinion is as it
19 relates to this document?
20 A. Well, I found that it was directly related to when an
21 individual logged into the Yahoo account.
22 MS. CHAIKEN: Okay. And so if we can publish Defense
23 Exhibit F23H. And if you could just pull out the content
24 there. And if you can just pull out the title, sorry, from
25 the top.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 74 of 145
227
1 BY MS. CHAIKEN:
2 Q. Is this a document that you prepared to show the file
3 being accessed shortly before the e-mail account access?
4 A. If you're talking about line item number 1 and 2, I
5 believe that's the PDF, yes.
6 Q. So line items number 1 and 2 are this Bellator Phront
7 Group Wells Fargo bank statement?
8 A. I believe so, yes.
9 Q. And based on the proximity and time here, you've
10 concluded that the person who was accessing this file was
11 also accessing the Yahoo e-mail account?
12 A. Correct.
13 Q. And what date was that on?
14 A. The Yahoo was on the 19th of May, 2020, at 21:31. And
15 it's worthy to note that's the LNK. So it's not actually
16 accessing the Yahoo itself by going to mail.yahoo.com, it's
17 accessing a LNK file that's on the computer. So it follows
18 after that. The LNK file is like a physical file that's on
19 the system.
20 Q. And you didn't analyze any other devices to determine
21 what else was done with this file, this Bellator Phront Group
22 bank statement; correct?
23 A. That's correct.
24 MS. CHAIKEN: If you could please publish Government
25 Exhibit 2338 side by side with Defense Exhibit F23H. And if
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 75 of 145
228
1 you could pull out the middle message, please, Ms. Holland.
2 And if you could pull out that file name on Mr. Persinger's
3 report.
4 BY MS. CHAIKEN:
5 Q. Mr. Persinger, do you recognize the message on the left
6 as something that looks like it comes out of Cellebrite?
7 A. Well, based on that exhibit alone, I can't tell it's
8 Cellebrite. I can tell that it's part of WhatsApp.
9 Q. Okay. I'll represent to you that it was previously
10 admitted in this case as a WhatsApp message.
11 Do you see that it says that it's a WhatsApp message from
12 Darrell Thomas to Teldrin Foster -- to Teldrin?
13 A. I'm sorry, which --
14 Q. On the left in the message do you see at the top there
15 where it says, From DJ to Teldrin?
16 A. Yes.
17 Q. And then do you see the date there at the bottom that
18 says May 19th?
19 A. Yes.
20 Q. And that's the same date as the file was downloaded on
21 Darrell Thomas's laptop; correct?
22 A. Correct.
23 Q. And if you look at the title.
24 MS. CHAIKEN: And, Ms. Holland, if you could
25 highlight the title in the text message.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 76 of 145
229
1 BY MS. CHAIKEN:
2 Q. Do you see the title there is
3 EF1E334B665248A5B5550D63A465C1D9?
4 A. Yes, I see that.
5 Q. And that's the exact same file name as the file name that
6 was on Darrell Thomas's laptop; correct?
7 A. Correct.
8 Q. Okay. So you didn't consider in your opinion in any way
9 that on the exact same date that this document was downloaded
10 from Darrell Thomas's -- on Darrell Thomas's device, it was
11 also messaged via WhatsApp to Teldrin Foster; correct?
12 A. Well, that's correct, because I didn't have access to
13 that phone data.
14 Q. Right. Because nobody provided you with the phone;
15 correct?
16 A. Correct. And whoever analyzed it didn't do any kind of
17 report that I saw that related to that either.
18 Q. Right. But you're not testifying a report wasn't
19 prepared; correct?
20 A. Well, no. But, again, part of my job would be to read
21 reports, if it's a Rule 16 or Rule 26, depending on the venue,
22 the -- to see if there's an expert report involved. If there
23 were an expert report, I would have asked to see the data.
24 Q. Okay. But did you ask to see the Cellebrite extraction
25 from Darrell Thomas's phone?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 77 of 145
230
1 A. I did not.
2 MS. CHAIKEN: Now, if you could pull out 2338A side
3 by side with F23C.
4 BY MS. CHAIKEN:
5 Q. So, Mr. Persinger, on the left 2338A is the -- what was
6 sent in that WhatsApp message that we just looked at from
7 Darrell to Teldrin on May 19th. And on the right is your
8 exhibit that you attached to your report; correct?
9 A. I believe so, yes.
10 Q. And those are the same document; correct?
11 A. With the exception of what looks to be the account
12 redaction, I would agree.
13 Q. Does knowing that Darrell Thomas sent this document to
14 Teldrin Foster on the exact same day as that file was accessed
15 on the account influence your opinions in any way as to who
16 may have been using the computer?
17 A. No. Because, again, I don't know who had possession of
18 the cellphone when the document was sent.
19 Q. And you're not opining about who was using anything;
20 right?
21 A. That's correct.
22 Q. You're just saying what was on Darrell Thomas's device?
23 A. Correct.
24 Q. So the jury is going to have to look at other evidence to
25 determine who was actually using any particular device at any
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 78 of 145
231
1 particular time; correct?
2 A. I would agree with that.
3 Q. Now, you also testified very briefly that you found
4 metadata on Darrell Thomas's laptop; correct?
5 A. Correct.
6 MS. CHAIKEN: And if you could publish Defense
7 Exhibit F23F.
8 BY MS. CHAIKEN:
9 Q. Is this an exhibit that you prepared and attached to your
10 report that had some documents with metadata?
11 A. Yes.
12 Q. And metadata for a file does not necessarily mean a file
13 was created on the device itself; correct?
14 A. I would agree with that, yes.
15 Q. So going back to my example, if I'm working in my office
16 on my computer and I create a document, if I were to then
17 e-mail that document to Ms. Webster and she downloaded it,
18 there would now be a document on her computer with my metadata
19 on it; correct?
20 A. That would be correct. As long as she didn't open it and
21 change it, remove the metadata, yes.
22 Q. And that wouldn't be an indication that I used
23 Ms. Webster's computer; correct?
24 A. That you were the author of that document. Not
25 necessarily using the computer but authored that document.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 79 of 145
232
1 Q. It would be evidence that Ms. Webster has a document on
2 her computer that I was the author of; correct?
3 A. Not necessarily. Because, again, especially when we're
4 talking about a Word document in your example. There would be
5 what's called a cache version of the document that I would
6 find that would also align that says this document was
7 actually factually created on this computer.
8 Q. Okay. So you've included this list of metadata or
9 documents with metadata. And some of them don't have
10 metadata; correct?
11 A. That's correct.
12 Q. And you identified two documents that were -- that listed
13 Gena Pyfrom as the author; correct?
14 A. Yes.
15 Q. And those were documents that were downloaded onto the
16 device, weren't they?
17 A. They were found on the device, yes.
18 Q. And they were downloaded to the device, as opposed to
19 being created on the device; correct?
20 A. I can't say the source of where it came from. I only
21 know that it is found on the computer.
22 Q. And you're not opining that they were created on the
23 computer; correct?
24 A. No.
25 Q. Okay.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 80 of 145
233
1 MS. CHAIKEN: If you can go down to page 2,
2 Ms. Holland.
3 BY MS. CHAIKEN:
4 Q. There's a lot of documents that have no metadata on this
5 computer; correct?
6 A. That's correct.
7 Q. So that tells you nothing about who had anything to do
8 with creating them; right?
9 A. That's correct.
10 Q. And, in fact, Darrell Thomas's name actually doesn't
11 appear in the metadata; correct?
12 A. No. That's correct.
13 Q. And you know that this is a device that was seized from
14 Darrell Thomas; correct?
15 A. That's correct. However, you control who you want to
16 show as the author. Mine shows Peter Pan.
17 Q. Exactly. So the metadata really tells us very little
18 about who had anything to do with the creation of a document;
19 right?
20 A. Well, yeah, to that extent. However, when you're looking
21 at the document and you've got a person's name that may be
22 associated with the case, it kind of fits, because most people
23 don't change metadata.
24 Q. Right. But you're not testifying that Darrell Thomas had
25 nothing to do with any of these files because his name isn't
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 81 of 145
234
1 on the metadata; correct?
2 A. Correct.
3 Q. So the absence of metadata with someone's name doesn't
4 mean that they were uninvolved in any of these documents;
5 correct?
6 A. Correct.
7 MS. CHAIKEN: Let's go to page 5 of this exhibit,
8 please. And if you could pull out file number 294, down at
9 the very last page.
10 BY MS. CHAIKEN:
11 Q. This is one of the documents that you identified as
12 having Gena Pyfrom listed as the author; correct?
13 A. That's correct.
14 Q. And did you do any investigation in your analysis to
15 determine where that file came from?
16 A. No, I did not.
17 MS. CHAIKEN: If you could please publish Government
18 Exhibit 2428 -- and, I'm sorry, stay on this one for one
19 second.
20 BY MS. CHAIKEN:
21 Q. The file name is 2020 Jan-Feb Payroll Report by
22 Employee.xls; correct?
23 A. Yes.
24 Q. It's an Excel spreadsheet?
25 A. It is.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 82 of 145
235
1 MS. CHAIKEN: And if you could please publish
2 Government Exhibit 2428.
3 BY MS. CHAIKEN:
4 Q. Do you see that this is an e-mail from
5 gjpyfrom@gmail.com?
6 A. I do.
7 Q. And it's an e-mail that was sent to Darrell Thomas and to
8 teldrin23@icloud.com?
9 A. It appears, yes. It doesn't have a header, but based on
10 the two, yes, I would agree with that.
11 Q. And the attachment was a file that was called 2020
12 Jan-Feb Payroll Report by Employee.xls; correct?
13 A. Yes.
14 Q. Okay. So this file that you found on Darrell Thomas's
15 device was e-mailed to Darrell Thomas and to the Teldrin 23
16 iCloud account; correct?
17 A. Based on the two, yes, I would agree with that.
18 MS. CHAIKEN: Could you go back to F23F, please.
19 BY MS. CHAIKEN:
20 Q. How did you choose which files to include in this listing
21 of files from the computer?
22 A. The best I remember is they were -- I think -- I recall
23 them being in the downloads folder. And I just basically did
24 a select all.
25 Q. Okay. And looking at these file names, do you see that
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 83 of 145
236
1 there are various file names related to PPP loans and tax
2 documents and things like that?
3 A. Yeah. And it appears to have some that have been
4 deleted, but yes.
5 Q. Okay. And did you analyze any other devices to determine
6 anywhere else these files may have gone?
7 A. I did not.
8 Q. If you had access to other devices, that could have
9 helped you see if there was correlation between what was
10 happening on Darrell Thomas's device and what was happening on
11 other devices, wouldn't it?
12 A. To a degree. Again, my assignment was to look for the
13 e-mail address, see where I could find a match to it, and that
14 was that QAT02, and then search that device for any files that
15 may be, you know, relevant.
16 Q. Okay. And your assignment really wasn't to try to figure
17 out whether Teldrin Foster had access to any of these files;
18 correct?
19 A. Or Darrell Thomas for that matter, yes.
20 Q. You just were typing in search terms to see what was on
21 the laptop?
22 A. Correct. Knowing where the device came from and that was
23 pretty much the limit of it.
24 MS. CHAIKEN: If you could go to page 6, line 313,
25 please. And just pull that one out. Just the title is fine.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 84 of 145
237
1 Thank you.
2 BY MS. CHAIKEN:
3 Q. You see that this file name starts with 33B2E3D2?
4 A. I do.
5 Q. And that file has no metadata associated with it at all;
6 correct?
7 A. Correct.
8 Q. Okay. So you don't know who was involved in creating,
9 accessing, modifying it; correct?
10 A. That's correct.
11 MS. CHAIKEN: And if you could please publish this
12 side by side with Government Exhibit 2300, page 307. And if
13 you could just pull out that line 313 again. And if you could
14 pull it out in that message -- and if you could pull it out in
15 the message at the top there, please.
16 BY MS. CHAIKEN:
17 Q. Do you see there that Darrell -- Darrell -- DJ sent to
18 Teldrin a document with the title 33B2E3D2, ending in A166,
19 that's the exact same file that you've identified on your file
20 list from Darrell Thomas's laptop?
21 A. Yeah. Again, I see that 1243 looks like it was sent to
22 8218, but I don't know who's behind the devices. But I would
23 agree with that.
24 Q. And you didn't consider in your analysis the fact that
25 Darrell Thomas sent this -- this same exact file via WhatsApp
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 85 of 145
238
1 to Teldrin; correct?
2 A. No. I see that it is a file that's on the system that I
3 analyzed.
4 Q. Correct. You see that it's the same file that you
5 analyzed, correct, same unique string of many numbers?
6 A. That's correct.
7 Q. If you could take a look at --
8 MS. CHAIKEN: If we could just do page 8 side by side
9 with Government Exhibit 2330 -- sorry, let's skip that one.
10 Let's go to page 7 -- we already did that one.
11 Page 7 side by side with 2334. And if you could pull
12 out lines 378, 379 and 381, please. And if you could also
13 pull out -- is there a way to pull out all three messages?
14 BY MS. CHAIKEN:
15 Q. Here on your file list you've got various files that have
16 names like backup_image_stamped_01 or 02; correct?
17 A. Yes.
18 Q. And do you see that Darrell Thomas sent Teldrin via
19 WhatsApp those same files with those same file names?
20 A. Well, again, it seems to be coming from 1243 to 8218,
21 yes.
22 Q. And the jury is just going to have to rely on other
23 evidence to determine who was controlling that 8218 number;
24 correct?
25 A. Correct.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 86 of 145
239
1 Q. And you didn't review any phones associated with that
2 8218 number?
3 A. I did not.
4 Q. And you didn't review the device associated with the 1243
5 number that was seized from Darrell Thomas's home; correct?
6 A. I did not.
7 MS. CHAIKEN: If you could look at page 6. If we
8 could go back to page 6 of F23F side by side with 2339. And
9 if you could pull out lines 335 and 336, please. They're
10 down -- thank you.
11 BY MS. CHAIKEN:
12 Q. And this is another set of messages where Darrell Thomas
13 sent Teldrin Foster a file with the exact same name as the
14 file name that you put in your file list; correct?
15 A. I'm sorry, I don't see the DOC file name.
16 Q. I'm looking at the title Abacus Tech August 2018.pdf.
17 A. Okay. But the file name says it's DOC-20200421-W,
18 whiskey, A, Adam, 0012.
19 Q. Okay. And are you familiar with the fact that when a
20 document is sent through WhatsApp, it has a naming convention
21 that matches up with the date and then WA, WhatsApp, with then
22 a series of numbers?
23 A. So that would be the number that if it's sent through I
24 would expect to find on the computer.
25 Q. Okay. But do you see where it says title, Abacus Tech
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 87 of 145
240
1 August 2018.pdf?
2 A. I see the title, but I see the name of the file being
3 different.
4 Q. Okay. So would you like to see the documents so that you
5 can verify they're the same ones you found on the document?
6 A. I'm using your exhibits.
7 MS. CHAIKEN: Okay. Let's please pull up 2339A.
8 BY MS. CHAIKEN:
9 Q. This is the Abacus Technology bank statement that Darrell
10 Thomas WhatsApped to Teldrin Foster that we just looked at.
11 Is that the file that you found on Darrell Thomas's device?
12 A. I didn't open up the rest of the file. The only one I
13 did is the one that I made the exhibit of.
14 Q. Okay. So you just don't know whether it's the same file?
15 A. I don't know the content.
16 Q. Okay.
17 MS. CHAIKEN: Could I have one moment, Your Honor?
18 THE COURT: Certainly.
19 MS. CHAIKEN: And if we could go back to F23I,
20 please.
21 BY MS. CHAIKEN:
22 Q. Mr. Persinger, you testified that you didn't find Yahoo
23 log-ins earlier than May 19th of 2020 because the Internet
24 history deletes and writes over itself; correct?
25 A. Correct.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 88 of 145
241
1 MS. CHAIKEN: And if you could scroll down,
2 Ms. Holland, all -- I guess to page 12.
3 BY MS. CHAIKEN:
4 Q. Do you see Internet history there going back to December
5 of 2018?
6 A. Yes, I see that.
7 Q. Okay. So at least back to 2018 there's existing Internet
8 history; correct?
9 A. Well, that could be just a bookmark, which would be
10 totally different than a person's interaction with the web
11 browser.
12 Q. Did you determine that these were all bookmarks from
13 2018?
14 A. I didn't classify them as bookmarks at all, just Internet
15 history files and references.
16 Q. All right. I want to switch gears.
17 Mr. Persinger, you're familiar with Adobe's products;
18 correct?
19 A. I am.
20 Q. You use Adobe in your work?
21 A. Illustrator primarily. And the PDF reader.
22 Q. And that's -- the PDF reader is through Adobe Acrobat?
23 A. I'm sorry, ask it again, please.
24 Q. The PDF reader is through Adobe Acrobat?
25 A. Correct.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 89 of 145
242
1 Q. And, in fact, you used Adobe Acrobat to create your
2 report in this case; correct?
3 A. No, I did not.
4 Q. Well, it was provided to us as a PDF.
5 A. Well, it converted to a PDF, but I use a different
6 program to do that.
7 Q. And then you converted it to a PDF using Adobe; correct?
8 A. I did not.
9 Q. Okay. Someone else converted it to Adobe?
10 A. Yeah. So Adobe is not the only one that creates PDF
11 files.
12 Q. Okay. And the domain www.adobe.com, that's a domain
13 that's associated with Adobe and its suite of products;
14 correct?
15 A. Correct.
16 Q. Okay. And other domains that end with adobe.com, those
17 are also domains that are associated with Adobe; correct?
18 A. Correct.
19 Q. Okay. And so the domain auth.services.adobe.com would be
20 a domain that's associated with Adobe; correct?
21 A. I would agree with that.
22 Q. Okay. So I'm a little confused, Mr. Persinger, because
23 I'm looking at your report. And your report says that the
24 data on the computer supports that the computer user was, in
25 fact, accessing the teldrin23@icloud.com account. Do you
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 90 of 145
243
1 recall saying that in your report?
2 A. I do.
3 Q. And you said, As shown in Exhibit 9; correct?
4 A. Correct.
5 MS. CHAIKEN: If you could publish F23R, please.
6 BY MS. CHAIKEN:
7 Q. This is your Exhibit 9; correct?
8 A. It is, yes.
9 Q. This is the one that your report says shows that it
10 was -- that the user of this laptop logged into the iCloud
11 account; correct?
12 A. Correct.
13 Q. And teldrin23@icloud.com is an e-mail address; correct?
14 A. It is.
15 Q. It's an iCloud-based e-mail address?
16 A. It is.
17 Q. And all three of these events that you've included here
18 in your Exhibit 9, they list the resource as https
19 auth.services.adobe.com, don't they?
20 A. I see that, yes.
21 Q. So these are not attempts to log into an e-mail account,
22 are they?
23 A. They could be, but it could be that the document was
24 being checked to see if it was digitally signed.
25 Q. Doesn't this look like someone's trying to log into an
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 91 of 145
244
1 Adobe account with the username teldrin23@icloud.com?
2 A. It shows to me that somebody's trying to access the
3 teldrin23@icloud.com.
4 Q. This isn't happening on www.icloud.com, is it?
5 A. No, it's not.
6 Q. And this was happening at auth.services.adobe.com;
7 correct?
8 A. It could be simply that somebody was in teldrin23@icloud
9 and accessing that website while in that iCloud account.
10 Q. There is nothing that you found on the device that shows
11 that this device was ever logged into the teldrin23@icloud.com
12 account; correct?
13 A. It's part of the security log. The security log is
14 authenticating a user that was using Teldrin 23 and then to
15 get into the Adobe website that you pointed out.
16 Q. This security log doesn't reflect that anybody was ever
17 logged into the iCloud e-mail account, does it?
18 A. My opinion is the identity is that of teldrin23@icloud.
19 That says that somebody -- because it's in the event viewer
20 for security that somebody was authenticated.
21 Q. So, Mr. Persinger, I can go to my bank's website, right,
22 chase.com?
23 A. Okay.
24 Q. Right? And I can -- my username on my bank is my e-mail
25 address; correct?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 92 of 145
245
1 A. Okay.
2 Q. So I can type in my username, my e-mail address, and then
3 I can type in my password. And then when I click enter, I'm
4 going to be inside my bank account; correct?
5 A. Yes. And then if you go open up a new tab and go to log
6 into Adobe, it may assume that you're using the Teldrin 23 or
7 using your e-mail address.
8 Q. There's not a single event in the security log on this
9 computer that shows the resource as icloud.com; correct?
10 A. No. It's saying that the identity was, in fact,
11 authenticated.
12 Q. There's nothing in here that says the identity was
13 authenticated, is there?
14 A. It's part of the security.
15 Q. Right. And weren't --
16 A. Not the event log.
17 Q. Weren't these security logs, in fact, generated because
18 all three of these were failed attempts to log into Adobe
19 using the iCloud account, the iCloud identity?
20 A. I don't see where it says it failed.
21 Q. Well, have you looked at the -- at all of the codes that
22 were returned in the security event log?
23 A. No. I'm only concerned about the identity of the e-mail
24 address.
25 Q. And did you look up these return codes to determine if
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 93 of 145
246
1 any of them are associated with a failed log-in attempt?
2 A. I did not.
3 Q. Okay. So you just don't know whether these were
4 successful or not?
5 A. Well, it's in the log file, so I'm assuming -- I'm making
6 the opinion that they are, in fact, authenticated.
7 Q. So your opinion is that every time something shows up in
8 the security log, it's a successful log in attempt?
9 A. Under this situation, I am.
10 Q. Okay. And so your opinion is that there's not security
11 logs generated when there's a failed attempt to log into an
12 account?
13 A. Well, it wouldn't have the same event ID number.
14 Q. You just testified you didn't look into any of these
15 codes or the event ID numbers.
16 A. In the code -- in the event data box you're referring.
17 I'm referring to the event ID.
18 Q. Okay. Well, let me just ask you this, Mr. Persinger: If
19 one -- if this event was a successful log in, why would there
20 be two more right afterwards, seconds later?
21 A. That's something you'd have to ask the user.
22 Q. Okay. And you had --
23 MS. CHAIKEN: You can go back to F23I, please, real
24 quick.
25 BY MS. CHAIKEN:
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 94 of 145
247
1 Q. This was the exhibit that you attached to your report
2 that showed all of the activity inside of the mail account for
3 the Yahoo account; correct?
4 A. It is.
5 Q. It showed access to messages; correct?
6 A. Ask that again, please.
7 Q. This -- your printout, your exhibit showed that there
8 were messages being read in the Yahoo account?
9 A. That's correct.
10 Q. And that the account -- the user was actually interacting
11 with the Yahoo mail account?
12 A. There was human interaction with it, yes.
13 Q. You don't have a similar printout for the iCloud account;
14 correct?
15 A. I do not.
16 Q. Now, the security event log, that's a log of all
17 security-related events, like logging into or logging out of
18 accounts; correct?
19 A. Typically, yes.
20 Q. And you --
21 MS. CHAIKEN: If we can go back to F23R, please.
22 BY MS. CHAIKEN:
23 Q. These are the three events that you found that referenced
24 teldrin23@icloud.com; correct?
25 A. Correct.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 95 of 145
248
1 Q. In your direct testimony you said that you reviewed
2 2,200, approximately, pages of event logs; correct?
3 A. That your office provided, yes.
4 Q. When did you review those?
5 A. Wednesday I think it was.
6 Q. Okay. And before you reviewed that, you did your own
7 independent analysis of the computer; correct?
8 A. That's correct.
9 Q. That's how you generated your report?
10 A. Correct.
11 Q. And you looked at security event logs because that's
12 where you pulled this data from; correct?
13 A. Well, I didn't look at the entire log. I only looked at
14 what I got the match to the e-mail address of.
15 Q. Okay. And at that time what you said in your report was
16 the event viewer logs are chronologically organized by date
17 and are set to be quickly purged, didn't you?
18 A. That's correct.
19 Q. And you later again said -- you said the event viewer
20 logs -- when you were talking about the iCloud account, Event
21 viewer logs produced a positive return; however, because these
22 logs are set to quickly purge, the list is limited; correct?
23 A. Correct.
24 Q. Okay. So you were saying you just didn't find a lot of
25 references to the iCloud account because it was purging;
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 96 of 145
249
1 correct?
2 A. Correct.
3 Q. And what was your basis for saying that it was purging?
4 A. The event viewer log file is only 20 megs in size. This
5 particular hard drive was 256 gigs. So you would roughly have
6 12,800 copies of that event viewer log file if it kept
7 everything. So because of that, the 20 meg file does quickly
8 FIFO, first-in, first-out, purges information.
9 Q. And, Mr. Persinger, the laptop that you reviewed, it had
10 a software install update on April 30th of 2020; correct?
11 A. I don't recall if it did.
12 Q. Would it refresh your recollection to look at your
13 report?
14 A. Yes, it would.
15 Could you ask the question again now that I've seen that.
16 Q. The laptop that you reviewed had new software installed
17 on April 30th, 2020; correct?
18 A. Correct.
19 Q. And I just -- I want to make sure this is clear to the
20 jury with this event viewer issue because, again, your -- what
21 you said in your report was that the reason there aren't more
22 iCloud references on this laptop is because they were quickly
23 purging; correct?
24 A. Correct.
25 MS. CHAIKEN: Your Honor, I'm going to move to admit
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 97 of 145
250
1 Government Exhibit 2983, which was previously authenticated by
2 Candace Hunter.
3 MS. WEBSTER: No objection.
4 MR. MARSHALL: No objection.
5 THE COURT: It's admitted.
6 BY MS. CHAIKEN:
7 Q. Mr. Persinger, I'm going to bring you a physical copy of
8 it, okay, so that the jury can see the event viewer log.
9 MS. CHAIKEN: If you could publish 2983 on the Trial
10 Director as well, please.
11 BY MS. CHAIKEN:
12 Q. 2983 is the event -- the security -- just the security
13 event logs for this computer, okay.
14 That's what you previously reviewed on Wednesday?
15 A. I believe so, yes.
16 Q. And you determined that those are the security event logs
17 from this computer?
18 A. Correct.
19 MS. CHAIKEN: And if you can go to page 1, please,
20 Ms. Holland. And if you can just pull out that top -- top
21 line, please, that top entry.
22 BY MS. CHAIKEN:
23 Q. This is the first security event log that's in this
24 2,200-page document; correct?
25 A. Yes. Yes.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 98 of 145
251
1 Q. And it's dated April 30th of 2020?
2 A. That's what's in there, yes.
3 Q. And that's the date that the software was installed, the
4 new software on the computer?
5 A. That's correct.
6 Q. So this -- the event viewer log goes all the way back to
7 the very first day that this computer had this software on it;
8 correct?
9 A. It appears so, yes.
10 Q. Nothing was purged; right?
11 A. Well, I don't know. I'd have to look through and look at
12 each event log to see, you know, what's being recorded, what's
13 not because Microsoft may not keep each individual ID, it may
14 only purge certain portions of that while maintaining the
15 integrity of the file.
16 MS. CHAIKEN: If you could go down to 1,134, please.
17 BY MS. CHAIKEN:
18 Q. This is about halfway through the event viewer log;
19 correct, Mr. Persinger?
20 A. I would agree with that.
21 MS. CHAIKEN: If you can pull out that third entry
22 down, please.
23 BY MS. CHAIKEN:
24 Q. This is one of those references to the Teldrin 23 iCloud
25 account in Adobe; correct?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 99 of 145
252
1 A. Yes.
2 Q. This is one of the ones that you found?
3 A. It is.
4 Q. And it's surrounded by other security event log files,
5 isn't it?
6 A. When you say "surrounded," you mean top and bottom?
7 Q. Well, there's about 1,133 pages before it, and, you know,
8 about 900 pages after it of other event logs; correct?
9 A. Correct.
10 Q. And looking at this 2,200 pages of event viewer logs, you
11 don't have a basis to say anything was set to be purged on
12 this device; correct?
13 A. I know that Microsoft does that based on only its file
14 size, but it could be also based on the event ID number. What
15 you've given me is the plethora of all the event IDs, not
16 specific to the ID itself.
17 Q. And you also reviewed a 16,000-page event log that was
18 not just the security events, but other kind of events as
19 well; correct?
20 A. That's correct.
21 Q. And those were all also on the computer, just going back
22 to April 30th; correct?
23 A. Correct.
24 Q. 16,000 pages of event logs?
25 A. Correct.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 100 of 145
253
1 Q. Okay. And despite that, your opinion here is that there
2 must have been something that was deleted that said iCloud in
3 it. Am I understanding that?
4 A. That's correct, I mean, if we want to make the leap that
5 a person only tried three times to get into the account and
6 then stopped, based on what you're saying. I say that the
7 account was authenticated three times. They could have left
8 it open, it wouldn't rerecord into the service -- into the
9 event log.
10 MS. CHAIKEN: May I have a moment, Your Honor?
11 THE COURT: Certainly.
12 MS. CHAIKEN: Can we pull F23F back up, please.
13 F23F. Nope, not what I meant. Sorry. F23R.
14 BY MS. CHAIKEN:
15 Q. I just want to make sure that this is totally clear to
16 the jury, Mr. Persinger.
17 You keep referencing someone being in the account.
18 Is it your testimony that these event logs here for
19 auth.services.adobe.com were caused by someone being logged
20 into the Teldrin 23 iCloud e-mail account?
21 A. I'm saying somebody used that e-mail address and was
22 authenticated.
23 Q. You are not saying that someone logged into the e-mail
24 account teldrin23@icloud.com with that e-mail address and the
25 password for the e-mail account; correct?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 101 of 145
254
1 A. Correct. I'm saying it was authenticated. Wherever
2 you're at, it's -- obviously it's authenticated.
3 Q. And it was authenticated on Adobe; correct?
4 A. Well, I can't say that. I don't have the Adobe log files
5 to make that determination.
6 Q. So basically what you're saying is that somebody typed in
7 the letters teldrin23@icloud.com on this computer somewhere
8 where you don't know; correct?
9 A. That part I would agree with, but I'm saying they're
10 authenticated. Wherever they're at, they're authenticated.
11 Q. But you testified you did not look at any of these event
12 codes to determine if they were actually authenticated;
13 correct?
14 A. That's correct. But it's in the event security log, it's
15 my opinion that it was authenticated.
16 MS. CHAIKEN: I have nothing further, Your Honor.
17 Thank you.
18 THE COURT: Mr. Marshall, did you have anything?
19 MR. MARSHALL: No, Your Honor.
20 THE COURT: Ms. Webster, any redirect?
21 REDIRECT EXAMINATION
22 BY MS. WEBSTER:
23 Q. Mr. Persinger, can you explain what you mean by it was
24 authenticated, the iCloud account being authenticated?
25 A. Username and password are generally the two elements
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 102 of 145
255
1 required to authenticate somebody.
2 Q. Okay. So your opinion is that someone logged into -- had
3 the username teldrin23@icloud.com and then a password for that
4 e-mail address; is that right?
5 A. To get authenticated, yes.
6 Q. So the government put this stack of paper in front of you
7 to talk about the event log; is that correct?
8 A. Yes.
9 Q. And I think the implication is that the files were not
10 quickly purging. Is that what you understood that to -- that
11 line of questioning to be about?
12 A. That's correct.
13 Q. Explain what you mean by the log files quickly purging,
14 despite the fact that there are 2,200 pages of it.
15 A. Well, it may find an event log ID number and that
16 information purges simply because if a person's logged in,
17 stays logged in, the log file doesn't need to rerecord that
18 information, so slowly it will purge.
19 Q. And so you're not saying -- when you say that the log
20 files purge quickly, you're not saying that there's no record
21 of all the different log files; right? You're saying that for
22 the one event ID that that file purges and is re-created so
23 there's only one of those. Am I understanding that correctly?
24 A. That's correct.
25 Q. So the fact that there are 2,200 other pages of other log
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 103 of 145
256
1 files has nothing to do with your opinion that for this log
2 file it can quickly purge and so that it would only be there
3 once?
4 A. That's correct.
5 Q. Okay. You were also asked about the Internet history
6 going back to 2018. Do you remember that line of questioning?
7 A. I remember.
8 Q. And so there was a suggestion, I think, that if there
9 were prior log-ins from -- from May of 2020, you would see
10 that; is that right?
11 A. That's what the -- yes.
12 Q. That was suggested.
13 A. Yes.
14 Q. And is that accurate?
15 A. No, it's not.
16 Q. Why not?
17 A. FIFO, again, first-in, first-out. Internet history can
18 purge itself. It can take certain entries and they'd be gone.
19 Q. Okay. So, again, because there's -- the fact that there
20 are other entries on the web history going back to 2018 does
21 not change your analysis about the Yahoo log-in; is that
22 right?
23 A. That's correct.
24 Q. Because even if there were prior -- prior log-ins on that
25 Yahoo account, then there still may be only the one file even
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 104 of 145
257
1 if there are other notations or other logs for other websites;
2 is that right? Did I explain that correctly?
3 A. Right. Other entries.
4 Q. Other entries; is that correct?
5 A. That's correct.
6 Q. Okay. And do you remember a series of questions where
7 you looked at the files that were on this computer and then
8 you looked at the WhatsApp messages?
9 A. Yes.
10 Q. And so do you recall that the files were downloaded on --
11 or were accessed on the computer and then they were sent via
12 WhatsApp?
13 A. Correct.
14 Q. Correct? Okay.
15 And so does that suggest, though, that you remember that
16 they were being sent by Darrell Thomas, right, or that's who
17 had access to the WhatsApp messages?
18 A. Correct. That was the inference.
19 Q. Okay. And so the fact that those messages -- those files
20 were being accessed on the computer and then being sent via
21 WhatsApp, does that suggest to you that Darrell Thomas is the
22 one using that laptop?
23 A. It may suggest it, but it doesn't actually say that
24 that's the person in the seat at the keyboard.
25 Q. Okay. Does the fact that the files, right, are being
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 105 of 145
258
1 downloaded and then sent to Teldrin Foster's WhatsApp account,
2 does that suggest that Teldrin Foster is the one accessing the
3 computer too?
4 A. No.
5 Q. It sort of supports the opposite; correct?
6 A. Yes.
7 Q. Okay. I think you were asked about what sort of devices
8 that you had looked at; is that right?
9 A. Correct.
10 Q. And do you recall that when I reached out to you about
11 working with us on this case, I was concerned about the format
12 of the materials that had been provided to us?
13 A. That's correct.
14 Q. Because I could not view them or make sense of them; is
15 that right?
16 A. Correct.
17 Q. So I felt like I needed an expert to help me understand
18 what was on the devices; is that correct?
19 A. Correct.
20 Q. So you're familiar with Cellebrite; is that right?
21 A. I am.
22 Q. So the fact that -- and is that program -- are the
23 reports that you get from Cellebrite, is that easily
24 accessible, is that something a layperson can use?
25 A. A layperson can use.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 106 of 145
259
1 Q. So is it fair to say that I didn't send you the
2 Cellebrite report because I could access that?
3 MS. CHAIKEN: Your Honor, objection. Leading and
4 calls for speculation.
5 MS. WEBSTER: I can rephrase the question.
6 THE COURT: Very well.
7 BY MS. WEBSTER:
8 Q. To your knowledge, did I ask you to look at any devices
9 that I can view and access?
10 A. No, there was no reason to.
11 Q. And does anything about what happens on other devices or
12 anything else change what you found about on this device?
13 A. It does not.
14 Q. Okay. And if there are other devices out there that have
15 other information, you don't know about that, right, because
16 you -- we don't know what else -- what other devices are out
17 there to be seized; is that right?
18 A. Correct.
19 Q. So we are limited to the devices that have been provided;
20 is that right?
21 A. That's correct.
22 Q. You said something about a LNK file. Can you explain
23 what that is?
24 A. So it's a L-N-K, a .lnk. Just like a Word document might
25 be .doc or .docx, a .lnk is a shortcut file. So if you
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 107 of 145
260
1 double-click on a shortcut file, it opens whatever that
2 shortcut file is designed to do. But the shortcut file is
3 actually generated after a person has already done the action
4 to create the shortcut. So, again, the action is first and
5 then the shortcut is generated.
6 Q. And is that what you were referring to on the exhibit
7 shown earlier?
8 A. Correct.
9 Q. So there was a shortcut to the Yahoo log-in, is that what
10 you were saying?
11 A. That's correct.
12 MS. WEBSTER: Okay. Your Honor, can I have one
13 second?
14 THE COURT: Certainly.
15 MS. WEBSTER: Your Honor, I am -- well, I need to --
16 I'm sorry. Can we approach or can we take up a matter outside
17 the presence of the jury?
18 THE COURT: Sure. Let's try to approach, if it might
19 be quick. That might save us some time.
20 (Bench conference commenced with the court reporter
21 present.)
22 MS. WEBSTER: Your Honor, in the pretrial motion you
23 had excluded his testimony about the statement made by Gena
24 Pyfrom-Foster, that she had access or that she was aware of
25 his password. I think the government has opened the door to
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 108 of 145
261
1 that evidence coming in by suggesting that there was no
2 information in this case that would be relevant to the Apple
3 Continuity issue, that it just has no relevance.
4 That is -- that was the point of that statement. He
5 relied on it. I can lay a foundation that it is material,
6 that he relies on it in his expert testimony. And I think the
7 door has been opened at this point.
8 MS. CHAIKEN: Your Honor, he has -- he offered an
9 opinion that has no basis in the evidence that Apple
10 Continuity is a product that exists. I crossed him on it and
11 they're now trying to use the fact that I crossed him on an
12 opinion that was not based on any materials in this case to
13 say that I opened the door to admission of the hearsay
14 statement that was what they were trying to back-door in for
15 that opinion in the first place.
16 He didn't say anything about reviewing anything about
17 Apple Continuity. He just said it. I crossed him on it. It
18 didn't open the door to anything.
19 MS. WEBSTER: But the whole reason it was in the
20 report, which everyone knows, is because he had seen the
21 information because it was provided. And that was the basis
22 for asking him about it and opining about it. So at this
23 point, the government was aware of that as we took that up,
24 and so by saying that there's no basis in the case, there is a
25 basis in the case because the witness -- there's the interview
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 109 of 145
262
1 where she says that she had the password.
2 MS. CHAIKEN: Your Honor, all she said in the
3 interview was that his regular password was player34. She
4 said nothing about having Apple Continuity. She said nothing
5 about using that password to log in to any Apple devices that
6 had his information on it, let alone an Apple device that has
7 Apple Continuity --
8 MS. WEBSTER: Every --
9 MS. CHAIKEN: -- on it. It has nothing to do -- it's
10 just an attempt to get rank hearsay in.
11 MS. WEBSTER: Which your --
12 MS. CHAIKEN: It's circular. There's no evidence
13 that -- there's no evidence that she had Apple Continuity or
14 that he had Apple Continuity. The only basis for that is the
15 hearsay statement that his password was player34, which is --
16 THE COURT: Ms. Webster, anything else?
17 MS. WEBSTER: That is the evidence. He had an iPhone
18 and Apple Continuity is on every device. And so she said I
19 had access to phone -- I had access to every -- to his phone
20 through this password.
21 And under 703 an expert can testify to hearsay if he
22 relied on it. Under 703 you can -- an expert can testify to
23 hearsay when he relies on it. And I can absolutely lay a
24 foundation that he would rely on that to make a conclusion.
25 THE COURT: Just like with the last one, I've got to
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 110 of 145
263
1 get underneath this. I'm not going to do it real quick here
2 at the bench conference. I want to work through it and we'll
3 see if we can get it done this evening or not.
4 (Bench conference complete.)
5 THE COURT: Déjà vu. Just like with the last one, we
6 were hoping to have a quickie over there and figure it out,
7 but we weren't able to. So I'm going to have to have you go
8 to the jury room. I'm cognizant of the hour, but I can't let
9 you leave yet this evening. I'm sorry. See you hopefully
10 shortly.
11 (The jury exited the courtroom at 4:59 p.m.)
12 THE COURT: If I can have the witness exit the
13 courtroom, please. Thank you.
14 (Witness excused from the courtroom.)
15 THE COURT: You can be seated. Give me a moment.
16 All right. Let me take a look at the pretrial motion
17 and go back to the pretrial ruling. Which motion was that in?
18 I assume it's the government's motion in limine somewhere?
19 MS. CHAIKEN: It wasn't in the motion in limine, Your
20 Honor, because we didn't get the report until after the motion
21 in limine deadline. So it was a stand-alone motion to -- it
22 was the motion to compel those scripts. And the second part
23 of that motion was the hearsay issue.
24 THE COURT: Okay. I'm just -- I was trying to pull
25 it up. I don't think that has a docket number.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 111 of 145
264
1 MS. CHAIKEN: Yeah, we need to get it.
2 MS. DURRETT: 829.
3 MS. CHAIKEN: 829? I'm not sure. I don't have the
4 docket pulled up. We'll pull it up.
5 THE COURT: If somebody could find that for me.
6 And my next question is going to be, what exactly was
7 my ruling?
8 MS. CHAIKEN: Your ruling excluded --
9 THE COURT: And we can go from there.
10 I mean, I know my ruling was to disallow it, but I'd
11 like to know what I said about disallowing it.
12 MS. WEBSTER: You said it was hearsay, Your Honor.
13 And it is Document 829.
14 THE COURT: All right. I have a copy of 829. Bear
15 with me.
16 All right. I've refreshed my memory about the
17 motion.
18 I guess, Ms. Webster, and you've already discussed
19 it at the bench conference, and Ms. Chaiken has already
20 responded, but I'm struggling to see how this changes things.
21 MS. WEBSTER: Because, Your Honor, when we
22 questioned -- or when I questioned Mr. Persinger about the --
23 about Apple Continuity, it's clear in the report that it is
24 based on the -- that it is based on the idea that
25 Ms. Pyfrom-Foster had access to his phone. Like, that is the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 112 of 145
265
1 reason that we had asked him about it. Or in -- and we know
2 that she said that she had his password at some point.
3 And so I had asked him, what would that do. What is
4 the purpose -- or, like, what would that allow her to access.
5 And so he made an opinion, based on this testimony, right,
6 accessing one device can give you access to another device,
7 especially if Apple Continuity is used or a person used the
8 same password for all devices.
9 And so then -- so I did not elicit any opinion about
10 the underlying facts, right, in accordance with the Court's
11 order. But then the government stood up and said there's no
12 basis in this case for concluding that Apple Continuity might
13 be relevant here.
14 But there is a basis in this case. It's just that we
15 haven't been allowed to present it. And so by saying there's
16 no basis in this case for concluding that it might apply here,
17 I think they opened the door. I think that it was admissible
18 under Rule 703 because the law is clear there's -- I can cite
19 to you United States v. Williams, 447 F.2d 1285. Experts can
20 rely on hearsay in forming their opinions.
21 THE COURT: That's never been in dispute. I mean,
22 that's just a general black letter principle, I think.
23 But go ahead.
24 MS. WEBSTER: So I can lay the foundation with
25 Mr. Persinger on the stand. I can say when you were making
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 113 of 145
266
1 expert opinions about the Apple Continuity or the likelihood
2 that Apple Continuity is an issue, did you have information
3 from this case to make that -- to make an opinion about that.
4 And we have information in this case to make an opinion about
5 that and we had kept it out -- or the Court had kept it out.
6 And now the Court -- the government stood up and said there's
7 no evidence in this case about it. But there is evidence in
8 this case about it. And so we should be able to present that
9 to the jury at this point.
10 Because now -- if they had stood up and not said
11 anything, right, to suggest that there was no evidence that
12 would support it, then that would be one thing. But they
13 didn't just not talk about that, they said there is no
14 evidence when that's not true.
15 THE COURT: Ms. Chaiken?
16 MS. CHAIKEN: Your Honor, this is exactly the type of
17 evidence that Rule 703 is designed to preclude. The statement
18 at issue here is a fleeting statement by Gena Pyfrom that
19 Teldrin Foster's regular password was player34. She never
20 said she logged into an iCloud account, an Apple device, a
21 phone, an iPad, anything that even has Apple Continuity on it.
22 So the idea that there's evidence we're trying to
23 keep the jury from hearing that's somehow relevant to this
24 opinion is baseless. But Rule 703 has basically three
25 premises before hearsay can be put before the jury.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 114 of 145
267
1 Number one, the expert must base their opinion on
2 facts or data in the case the expert has been made aware of or
3 personally observed. He has not offered an opinion that
4 anyone had Apple Continuity, that anyone was using Apple
5 Continuity, that there was Apple Continuity on any of Teldrin
6 Foster's devices, that Apple Continuity was active and was
7 being used such that his accounts were on multiple places.
8 All he has done is opine that Apple Continuity is a
9 feature that exists. And that was in his report before we
10 moved to exclude it. He did not offer an opinion that Apple
11 Continuity was something that Gena Pyfrom used on Teldrin
12 Foster's accounts.
13 The second part is that the opinion can be admitted
14 if the experts in the particular field would reasonably rely
15 on those kinds of facts or data in forming an opinion on the
16 subject. And Mr. Persinger has testified repeatedly that what
17 he looks at is the data on the device. He didn't testify that
18 any of his opinions in this case were formed based on what
19 anybody said about who was using the device. In fact, he said
20 even based on the fact that it was seized from Darrell
21 Thomas's house, he can't say that it was Darrell Thomas
22 because he's just looking at the data.
23 And a statement by someone who has now been convicted
24 of fraud to a law enforcement officer in an interview about
25 whether or not they have someone's password is not the type of
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 115 of 145
268
1 evidence that a forensic expert relies on in forming opinions
2 about what may or may not exist on a device that he is
3 forensically analyzing.
4 The third part is that a -- the -- if the facts or
5 data would otherwise be inadmissible, which I think here we
6 all agree they would be, because it is hearsay, the proponent
7 of the opinion may disclose them to the jury only if their
8 probative value in helping the jury evaluate the opinion
9 substantially outweighs their prejudicial effect.
10 And here the jury can evaluate Mr. Persinger's
11 opinion about what Apple Continuity is and how it works
12 without knowing what Gena Pyfrom-Foster said about the
13 password. The only reason why they want the jury to hear that
14 statement is because they don't have any evidence that there
15 was Apple Continuity operating across any devices. And
16 it's -- so that's not satisfied either.
17 And there's obviously a significant prejudicial
18 effect because Gena Pyfrom-Foster is not here. We can't
19 cross-examine her. She made a fleeting statement. We have no
20 idea what she meant, what she was talking about or even if she
21 was telling the truth.
22 THE COURT: All right. I agree with the government's
23 argument. I don't see any reason to change my earlier ruling.
24 Anything else, Ms. Webster, before we bring the
25 witness back in, back to the stand, and the jury back in?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 116 of 145
269
1 MS. WEBSTER: No, Your Honor.
2 THE COURT: All right. Thank you.
3 Let's do that, Officer, please. Grab the jury for
4 us. And if someone could grab the witness. Thank you.
5 MR. MARSHALL: Your Honor, I just have a quick, like,
6 administrative thing. Ms. Jackson had an issue with, when she
7 got close to 6:00 last night --
8 THE COURT: Yes. We'll make sure we get a CSO to
9 assist her this evening.
10 MR. MARSHALL: Okay.
11 THE COURT: Off the record.
12 (Off-the-record discussion.)
13 (Witness recalled to the stand.)
14 MS. WEBSTER: I have no further questions, for the
15 record.
16 THE COURT: Sir, they might be a minute or two if you
17 want to just sit and wait. Thank you. Y'all can.
18 (The jury entered the courtroom at 5:11 p.m.)
19 THE COURT: All right. Y'all can be seated. Thank
20 you.
21 MS. WEBSTER: I actually do have two more questions,
22 Your Honor. I'm sorry.
23 THE COURT: Go ahead, Ms. Webster.
24 BY MS. WEBSTER:
25 Q. Mr. Persinger, to your knowledge, is an iCloud account
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 117 of 145
270
1 generally associated with an Apple device?
2 A. It is.
3 Q. And how common is -- of a feature is Apple Continuity on
4 Apple devices?
5 A. Well, it's becoming more and more common.
6 Q. Increasingly common?
7 A. Yes.
8 Q. Is it in the majority of Apple devices?
9 A. Yes.
10 MS. WEBSTER: No further questions, Your Honor.
11 THE COURT: Any recross?
12 MS. CHAIKEN: No, Your Honor. Thank you.
13 THE COURT: Mr. Marshall?
14 MR. MARSHALL: No, Your Honor.
15 THE COURT: All right. Sir, you can step down.
16 Thank you.
17 (Witness excused.)
18 THE COURT: All right, Counsel. I know, you know, we
19 started off midmorning when I explained to the jury that we
20 had some short witnesses and then one witness we were going to
21 take out of order as well, just some scheduling issues.
22 Have we now exhausted all of those persons, all of
23 those witnesses?
24 MS. CHAIKEN: Yes, Your Honor. We're back to Agent
25 Stites.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 118 of 145
271
1 MS. WEBSTER: I think so, yes.
2 THE COURT: Okay. All right. How far along are we
3 with Agent Stites?
4 MS. WEBSTER: I have a lot more, Your Honor.
5 THE COURT: I'm sorry?
6 MS. WEBSTER: I have a lot more.
7 THE COURT: Okay.
8 Ladies and gentlemen of the jury, it's not exactly a
9 democracy, but I just want to take your pulse. Are there any
10 of you that want to stick around here at 5:15 this evening and
11 hear more or would you rather just come back on Monday?
12 All right. No one's raising their hand to stick
13 around at 5:15 on Friday.
14 Ladies and gentlemen of the jury, we're concluding
15 our first week of this trial. We're moving on to the second
16 week.
17 Counsel, safe to say we're looking probably at a day
18 or two more of evidence versus four more days of evidence,
19 which might have been the earlier prognosis?
20 MS. CHAIKEN: Yes, Your Honor.
21 THE COURT: Okay.
22 So ladies and gentlemen of the jury, counsel had
23 informed me and I've just confirmed with them that we're
24 moving a little quicker than they had expected; therefore, it
25 might be that we're done with the evidence in this case the
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 119 of 145
272
1 first part of next week. And then we'll, of course, hear
2 closing arguments and then you'll start your deliberations.
3 So things are moving a little bit more quickly, just
4 for your planning. That's not a promise of anything, but just
5 so you can kind of plan your lives based on the best available
6 information.
7 Thank you for being here. We will see you at 10:00
8 on Monday. You're reminded of your instructions for breaks,
9 including weekend breaks. Okay? Thank you.
10 (The jury exited the courtroom at 5:15 p.m.)
11 THE COURT: Y'all can be seated.
12 I've received Docket 912, the US's motion to admit
13 evidence of co-defendants' guilty pleas. When did we decide
14 the defense would be in a position to respond to that?
15 MS. WEBSTER: Your Honor, I think that you asked for
16 us to respond over the weekend, which we can certainly do. I
17 just want to propose a solution, but I haven't had a chance to
18 talk to the government about it. I don't know if you want us
19 to talk about it now?
20 THE COURT: Do you need to do that on the record or
21 do you just want to talk with the government and then report
22 to me?
23 MS. WEBSTER: We can talk.
24 THE COURT: And I understand you want to do that now
25 so you know if you're going to need to respond or not. So why
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 120 of 145
273
1 don't we just go off the record for a moment where y'all can
2 have that conversation.
3 (Off-the-record discussion.)
4 MS. CHAIKEN: I think we're making progress in our
5 discussions. And it sounds like what we'd like to do is take
6 some time all to chew on it and talk about it. And by Sunday
7 at 10:00 Mr. Foster's counsel will either file a response or
8 we will notify the Court that we have an agreement, if the
9 Court is amenable to that timing.
10 THE COURT: That's fine.
11 MS. WEBSTER: Thank you, Your Honor.
12 THE COURT: Other than that issue, do we anticipate
13 anything else we'll need to discuss before we go on the record
14 with the witness at 10:00?
15 MS. CHAIKEN: No, Your Honor.
16 MS. WEBSTER: We have an issue that we would like to
17 talk about.
18 THE COURT: Well, I was asking if there were -- I
19 guess I'm trying to get -- I'm trying to get the index of
20 issues, not necessarily talk about all the issues right now.
21 So other than that issue, which y'all know if that's an issue
22 or not, it sounds like, at 10:00 on Sunday, what other issues
23 are there? And I'm not entertaining talking about all of them
24 yet, I'd like to at least know what the list is.
25 MS. WEBSTER: Okay. Excellent.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 121 of 145
274
1 So it also involves renewing a motion in limine that
2 we had filed. Yesterday when the government admitted evidence
3 about the money laundering count, which is the deposit into
4 the Pyfrom Exclusive Consulting account, the implication I
5 think was pretty clear that Teldrin Foster was ultimately
6 responsible for that.
7 But if you recall, at Ms. Pyfrom-Foster's sentencing
8 hearing, the government was very clear that she was
9 responsible for that deposit. Specifically there were
10 messages between her and Darrell Thomas about that deposit,
11 coordinating that deposit in the WhatsApp messages that
12 Mr. Foster didn't know about.
13 And so at this point I think that we are renewing our
14 motion to bring in the government's prior statements to show
15 that Ms. Pyfrom-Foster was responsible for that.
16 MS. CHAIKEN: My turn? Okay. Thanks, Your Honor.
17 Your Honor, at Ms. Pyfrom-Foster's sentencing
18 proceeding, Ms. Pyfrom-Foster had asserted, I can't remember
19 if it was in her letter or in her sentencing memorandum, that
20 the account that that money went into, the Pyfrom Exclusive
21 Consulting account, was opened as a result of identity theft
22 by Teldrin Foster. And she suggested that she knew nothing of
23 that account's existence. And we put in evidence to show the
24 Court that she opened the account and she knew that the
25 account was opened and she knew that the check was deposited
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 122 of 145
275
1 into the account, so it was not identity theft by Mr. Foster.
2 That's a separate question from what that deposit was
3 for and who knew about it and who it went to. And Mr. Foster
4 admitted that in his interview, that that was a payment to him
5 that went through Gena Pyfrom-Foster's account because his
6 account got locked.
7 If Mr. Foster's counsel has a statement they've seen
8 that I made from Ms. Pyfrom-Foster's sentencing that that
9 payment was a payment to her that did not ultimately go to
10 Mr. Foster, I would like to see it. Maybe I'm forgetting it.
11 I've not reviewed that transcript.
12 But I know specifically that the reason why I
13 presented those materials to the Court was because she had
14 alleged she was a victim of identity theft and I was rebutting
15 that assertion from her, that she was a victim of identity
16 theft who knew nothing. And that, of course, went to the
17 3553(a) arguments related to her credibility.
18 And I don't think that the case law in the Second
19 Circuit, which the -- which Ms. Webster has cited in her
20 brief, which sets out a test that the Eleventh Circuit has not
21 adopted, but even if it had adopted that test, I don't think
22 that test is satisfied here because there has to be an actual
23 fundamental inconsistency where two things cannot be true.
24 THE COURT: Ms. Webster, anything else? I guess now
25 we've gotten more than just the headlines.
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 123 of 145
276
1 MS. WEBSTER: I was about to say, I thought we
2 weren't supposed to be discussing it at this point.
3 I, you know, would like to have the opportunity to
4 present the -- more from the actual sentencing transcript and
5 the government's sentencing memo, but the -- I think they were
6 very clear at that sentencing hearing that she set up that
7 account for this purpose and communicated with Darrell Thomas
8 about receiving this specific deposit. And leaving the jury
9 with the instruction that that -- or with the implication that
10 did not happen is highly inconsistent with its prior
11 positions. I think it's a due process issue. And I think
12 that it is appropriate at this point to renew our motion in
13 limine.
14 And I will note that another court in this courthouse
15 has done something very similar in a very similar situation,
16 which was in our reply about our motion in limine.
17 THE COURT: Okay. Well, based on what you've stated
18 at least here this evening, I don't see any reason to amend my
19 earlier ruling, but you mentioned you wanted to show me more
20 specifics and I'd be happy to look at more specifics. Send
21 that over the weekend or we can address it Monday morning.
22 Given that we may have at least the motion to admit
23 the evidence of the guilty pleas to discuss Monday, why don't
24 we all plan to be here at 9:30. Okay.
25 Anything else from either side?
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 124 of 145
277
1 MS. CHAIKEN: I'm just wondering, Your Honor, with
2 Juror 14, is he -- he's going to be back at 10:00 a.m. and
3 he's with us or --
4 THE COURT: Yes.
5 MS. CHAIKEN: Okay.
6 THE COURT: The procedure seems to be -- I think
7 Ms. Lee, he -- Sunday. And that it turns out Baby Reid goes
8 to school, so it's not as if he's going to be at the house
9 with his, perhaps, hopefully newly pregnant mother who can't
10 lift him up, but instead he goes to school. So he's going to
11 drop him off at school and be here by 10:00.
12 MS. CHAIKEN: Perfect.
13 THE COURT: Who knew? I feel like I haven't gotten
14 full information several times in that ordeal, but we
15 certainly all wish Juror 14 and his wife a big weekend.
16 Okay. Anything else?
17 (No response.)
18 THE COURT: No? All right. Y'all have a great
19 weekend. Take care. Get some rest.
20 (After a recess at 5:30 p.m., the proceedings were
21 continued as follows on February 12, 2024.)
22 - - - - -
23
24
25
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 125 of 145
278
1 C E R T I F I C A T E
2
3 UNITED STATES DISTRICT COURT
4 NORTHERN DISTRICT OF GEORGIA
5
6 I do hereby certify that the foregoing pages are a true
7 and correct transcript of the proceedings taken down by me in
8 the case aforesaid.
9
This the 9th day of February, 2024.
10
11
12
13
14 ________________________________
15 PENNY PRITTY COUDRIET, RMR, CRR
OFFICIAL COURT REPORTER
16
17
18
19
20
21
22
23
24
25
UNITED STATES DISTRICT COURT - OFFICIAL CERTIFIED TRANSCRIPT
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 126 of 145
279
0 20 [3] - 169:2, 249:4, 249:7 35,000-PAGE [1] - 163:13
20-PLUS [1] - 198:1 3500 [1] - 178:11
0 [2] - 189:6, 211:15 200 [1] - 206:19 3553(A [1] - 275:17
0012 [1] - 239:18 2000 [2] - 176:2, 178:6 360 [2] - 211:13, 211:15
005 [2] - 189:21, 190:1 2001 [1] - 178:6 37 [1] - 189:6
02 [1] - 238:16 2007 [1] - 176:2 378 [1] - 238:12
2015 [1] - 176:1 379 [1] - 238:12
1 2018 [5] - 241:5, 241:7, 241:13, 256:6, 381 [1] - 238:12
1 [6] - 156:3, 158:25, 163:1, 227:4, 256:20 3:22 [1] - 202:25
227:6, 250:19 2018.PDF [2] - 239:16, 240:1 3:23 [1] - 203:1
1,133 [1] - 252:7 2020 [19] - 162:6, 171:17, 172:14, 3:31 [2] - 203:2, 203:4
1,134 [1] - 251:16 172:21, 173:1, 175:18, 195:8, 197:11, 3:39 [1] - 172:8
1,790 [1] - 193:21 197:18, 224:15, 224:19, 227:14, 3:39:55 [1] - 172:6
10 [3] - 165:2, 189:4, 219:15 234:21, 235:11, 240:23, 249:10, 3:48 [1] - 214:1
100 [1] - 174:12 249:17, 251:1, 256:9 3:55 [1] - 215:3
1001 [1] - 173:12 2021 [1] - 162:6
1003 [1] - 170:25 2024 [4] - 155:11, 174:3, 277:21, 278:9 4
107 [2] - 193:20, 193:21 20TH [3] - 172:14, 172:18, 172:21
4 [6] - 163:19, 170:18, 170:21, 188:3,
10:00 [6] - 272:7, 273:7, 273:14, 273:22, 21 [1] - 172:13
191:14, 224:12
277:2, 277:11 21:31 [1] - 227:14
403(B [1] - 158:11
10:43:06 [1] - 173:10 22ND [2] - 197:10, 197:18
447 [1] - 265:19
10:52:43 [1] - 172:22 23 [6] - 186:22, 235:15, 244:14, 245:6,
45 [2] - 194:24, 197:10
11 [1] - 219:15 251:24, 253:20
473.43.127.162 [1] - 189:1
11:43:06 [1] - 173:6 2300 [1] - 237:12
4:59 [1] - 263:11
11:52 [1] - 172:15 2330 [1] - 238:9
11:52:43 [1] - 172:18 2334 [1] - 238:11
12 [2] - 241:2, 277:21 2338 [1] - 227:25 5
12,800 [1] - 249:6 2338A [2] - 230:2, 230:5 5 [4] - 155:6, 165:2, 191:15, 234:7
120 [2] - 211:13, 211:16 2339 [1] - 239:8 50 [1] - 217:2
1243 [3] - 237:21, 238:20, 239:4 2339A [1] - 240:7 524 [1] - 189:5
1285 [1] - 265:19 23I [1] - 194:6 5:11 [1] - 269:18
12:20 [1] - 197:10 2428 [2] - 234:18, 235:2 5:15 [3] - 271:10, 271:13, 272:10
12:30 [1] - 170:9 24TH [1] - 195:8 5:30 [1] - 277:20
14 [2] - 277:2, 277:15 256 [1] - 249:5
14:39:55 [2] - 171:21, 171:25 26 [1] - 229:21 6
15 [2] - 165:2, 169:1 2601 [1] - 189:3
6 [3] - 236:24, 239:7, 239:8
16 [6] - 208:25, 212:16, 212:19, 213:6, 294 [1] - 234:8
650 [1] - 178:18
213:13, 229:21 2954 [2] - 171:5, 171:16
69D [1] - 189:4
16,000 [1] - 252:24 2983 [3] - 250:1, 250:9, 250:12
6:00 [1] - 269:7
16,000-PAGE [1] - 252:17 2:09 [1] - 168:12
16,600 [1] - 200:19 2:31 [2] - 168:13, 169:2
17TH [1] - 171:17 2:34 [1] - 170:5 7
19 [1] - 172:2 2:39:55 [2] - 171:18, 171:19 7 [3] - 189:5, 238:10, 238:11
19TH [8] - 171:18, 224:15, 224:19, 700 [1] - 178:18
225:5, 227:14, 228:18, 230:7, 240:23 3 703 [5] - 262:21, 262:22, 265:18,
1:20-CR-00296-JPB [1] - 155:5 266:17, 266:24
3 [3] - 161:10, 161:11, 188:11
1:44 [1] - 157:1 30 [1] - 172:25
1B15 [1] - 219:21 3015 [1] - 168:18 8
1B8 [1] - 219:17 307 [1] - 237:12 8 [4] - 185:4, 219:11, 219:23, 238:8
30TH [5] - 195:8, 249:10, 249:17, 251:1, 8200 [1] - 189:4
2 252:22 8218 [4] - 237:22, 238:20, 238:23, 239:2
2 [6] - 156:5, 159:1, 189:5, 227:4, 227:6, 313 [2] - 236:24, 237:13 829 [4] - 264:2, 264:3, 264:13, 264:14
233:1 31ST [1] - 173:1
2,044 [1] - 194:22 32,000 [1] - 181:19 9
2,098 [1] - 194:23 33 [1] - 184:1
9 [4] - 155:11, 243:3, 243:7, 243:18
2,200 [5] - 200:18, 248:2, 252:10, 335 [1] - 239:9
90 [1] - 1:5
255:14, 255:25 336 [1] - 239:9
900 [1] - 252:8
2,200-PAGE [1] - 250:24 33B2E3D2 [2] - 237:3, 237:18
902.11 [1] - 173:12
344 [1] - 190:16
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 127 of 145
280
911 [1] - 181:12 ACTIVITY [2] - 190:6, 247:2 ALMOST [3] - 194:4, 201:13, 214:14
912 [1] - 272:12 ACTUAL [2] - 275:22, 276:4 ALONE [3] - 228:7, 262:6, 263:21
9:30 [1] - 276:24 ADAM [5] - 189:5, 189:6, 239:18 ALPHA [1] - 211:13
9TH [2] - 174:3, 278:9 ADD [1] - 175:16 ALPHA'S [1] - 211:14
ADDITIONAL [3] - 163:1, 166:17, 167:7 ALPHANUMERIC [1] - 189:7
A ADDITIONALLY [1] - 162:17 AMENABLE [1] - 273:9
ADDRESS [37] - 157:7, 168:9, 186:17, AMEND [1] - 276:18
A.M [4] - 172:18, 173:6, 197:10, 277:2
186:18, 187:5, 187:8, 187:25, 188:17, AMERICA [1] - 155:4
A166 [1] - 237:18
188:19, 188:23, 189:9, 189:11, AN [1] - 1:2
ABACUS [3] - 239:16, 239:25, 240:9
189:16, 190:7, 190:10, 190:13, ANALYSIS [15] - 158:11, 176:6, 176:9,
ABILITIES [1] - 216:3
190:22, 190:24, 191:4, 191:15, 192:3, 177:23, 192:20, 206:24, 211:9,
ABLE [28] - 158:19, 160:5, 167:20,
193:2, 193:22, 195:18, 200:23, 211:25, 213:5, 216:20, 220:15,
183:24, 185:15, 187:19, 187:25, 236:13, 243:13, 243:15, 244:25, 234:14, 237:24, 248:7, 256:21
188:20, 189:9, 190:23, 191:12, 245:2, 245:7, 245:24, 248:14, 253:21, ANALYST [2] - 162:9, 164:4
191:24, 192:2, 195:16, 198:12, 253:24, 255:4, 276:21 ANALYZE [11] - 180:10, 180:12, 181:22,
199:20, 200:11, 200:16, 200:22,
ADDRESSED [1] - 164:14 184:7, 184:12, 220:11, 220:12, 221:8,
201:23, 202:1, 206:6, 207:12, 209:12,
ADDRESSES [4] - 186:19, 188:20, 221:25, 227:20, 236:5
210:19, 212:21, 263:7, 266:8
199:2, 200:24 ANALYZED [5] - 220:19, 221:11,
ABSENCE [1] - 234:3
ADEQUATE [1] - 166:5 229:16, 238:3, 238:5
ABSOLUTELY [2] - 202:8, 262:23
ADJOURNED [1] - 168:11 ANALYZING [1] - 268:3
ACCESS [23] - 185:1, 195:7, 201:8,
ADJUST [1] - 175:15 AND [3] - 1:4, 1:7, 155:6
201:9, 201:18, 201:19, 205:1, 210:14,
ADMINISTRATIVE [1] - 269:6 ANN [1] - 155:18
227:3, 229:12, 236:8, 236:17, 244:2,
ADMISSIBLE [1] - 265:17 ANN'S [1] - 160:20
247:5, 257:17, 259:2, 259:9, 260:24,
ADMISSION [1] - 261:13 ANSWER [1] - 206:4
262:19, 264:25, 265:4, 265:6
ADMIT [7] - 170:25, 173:11, 183:1, ANSWERED [1] - 206:7
ACCESSED [9] - 187:5, 191:25, 192:12,
185:18, 249:25, 272:12, 276:22 ANTICIPATE [1] - 273:12
195:14, 195:18, 227:3, 230:14,
ADMITTED [13] - 171:6, 171:15, 173:19, ANY [1] - 1:9
257:11, 257:20
182:16, 183:5, 185:22, 186:10, APOLOGIES [1] - 170:9
ACCESSES [1] - 224:9
189:19, 228:10, 250:5, 267:13, 274:2, APOLOGIZE [1] - 170:11
ACCESSIBLE [1] - 258:24
275:4 APP [1] - 204:19
ACCESSING [11] - 191:12, 191:23,
ADOBE [17] - 241:20, 241:22, 241:24, APPEAR [4] - 174:9, 174:13, 196:22,
227:10, 227:11, 227:16, 227:17,
242:1, 242:7, 242:9, 242:10, 242:13, 233:11
237:9, 242:25, 244:9, 258:2, 265:6
242:17, 242:20, 244:1, 244:15, 245:6, APPEARANCES [1] - 155:13
ACCORDANCE [1] - 265:10
245:18, 251:25, 254:3, 254:4 APPEARED [1] - 187:20
ACCOUNT [66] - 191:16, 192:12, 195:2,
ADOBE'S [1] - 241:17 APPLE [47] - 203:11, 203:15, 203:16,
195:14, 195:22, 196:8, 196:16,
ADOBE.COM [1] - 242:16 204:1, 204:2, 204:25, 205:4, 205:12,
197:12, 197:14, 201:9, 205:23, 206:2,
ADOPTED [2] - 275:21 205:14, 206:2, 222:19, 222:21, 223:1,
218:18, 218:25, 223:24, 224:1,
AFFECTED [1] - 175:19 223:3, 223:5, 223:6, 223:9, 261:2,
224:10, 224:17, 224:21, 225:11,
AFORESAID [1] - 278:8 261:9, 261:17, 262:4, 262:5, 262:6,
225:20, 226:21, 227:3, 227:11,
AFTER [1] - 1:7 262:7, 262:13, 262:14, 262:18,
230:11, 230:15, 235:16, 242:25,
AFTERNOON [6] - 177:5, 177:6, 177:19, 264:23, 265:7, 265:12, 266:1, 266:2,
243:11, 243:21, 244:1, 244:9, 244:12,
244:17, 245:4, 245:19, 246:12, 247:2, 177:20, 217:19, 217:20 266:20, 266:21, 267:4, 267:5, 267:6,
247:3, 247:8, 247:10, 247:11, 247:13, AFTERWARDS [1] - 246:20 267:8, 267:10, 268:11, 268:15, 270:1,
248:20, 248:25, 251:25, 253:5, 253:7, AGENT [6] - 157:2, 158:1, 159:10, 270:3, 270:4, 270:8
253:17, 253:20, 253:24, 253:25, 159:16, 270:24, 271:3 APPLICATION [1] - 196:20
254:24, 256:25, 258:1, 266:20, AGENT [2] - 159:25, 168:19 APPLICATIONS [1] - 205:1
269:25, 274:4, 274:20, 274:21, AGO [5] - 165:2, 178:5, 212:22, 212:23 APPLY [2] - 203:24, 265:16
274:24, 274:25, 275:1, 275:5, 275:6, AGREE [11] - 230:12, 231:2, 231:14, APPROACH [3] - 211:17, 260:16,
276:7 235:10, 235:17, 237:23, 242:21, 260:18
ACCOUNT'S [1] - 274:23 251:20, 254:9, 268:6, 268:22 APPROPRIATE [2] - 164:13, 276:12
ACCOUNTS [5] - 216:1, 223:16, 247:18, AGREEMENT [1] - 273:8 APPROXIMATE [1] - 216:22
267:7, 267:12 AHEAD [5] - 162:3, 175:6, 217:16, APRIL [4] - 249:10, 249:17, 251:1,
ACCURATE [4] - 175:15, 176:10, 199:3, 265:23, 269:23 252:22
256:14 ALBUM [1] - 184:1 ARCADEPAINTCO03@GMAIL.COM [1]
ACHIEVED [1] - 208:22 ALIGN [1] - 232:6 - 190:13
ACROBAT [3] - 241:22, 241:24, 242:1 ALLEGED [1] - 275:14 ARE [1] - 1:8
ACTION [3] - 192:6, 260:3, 260:4 ALLOW [2] - 206:1, 265:4 AREA [4] - 175:23, 206:4, 216:10, 217:1
ACTIVE [5] - 205:5, 205:22, 205:25, ALLOWED [1] - 265:15 AREAS [1] - 176:7
206:9, 267:6 ALLOWS [7] - 181:9, 181:12, 181:22, ARGUMENT [1] - 268:23
184:7, 198:1, 198:8, 203:16
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 128 of 145
281
ARGUMENTS [2] - 272:2, 275:17 BACKUP_IMAGE_STAMPED_01 [1] - BOULDER [1] - 180:24
ARISE [1] - 170:10 238:16 BOULEE [1] - 155:10
AROSE [1] - 159:2 BANK [1] - 174:9 BOUNCED [2] - 209:9, 210:7
ARTIFACTS [1] - 181:10 BANK [8] - 191:6, 191:13, 226:15, BOX [3] - 192:18, 192:25, 246:16
ASSERTED [1] - 274:18 227:7, 227:22, 240:9, 244:24, 245:4 BOXES [1] - 199:14
ASSERTION [1] - 275:15 BANK'S [1] - 244:21 BOY [1] - 189:4
ASSESS [1] - 210:19 BASE [1] - 267:1 BRAND [2] - 167:23, 167:24
ASSIGNMENT [3] - 219:5, 236:12, BASED [25] - 162:10, 168:24, 169:5, BRAND-NEW [2] - 167:23, 167:24
236:16 169:6, 173:4, 175:21, 209:12, 214:23, BREAK [9] - 159:15, 159:20, 159:23,
ASSIGNS [1] - 219:25 220:21, 227:9, 228:7, 235:9, 235:17, 162:23, 167:9, 170:8, 170:17, 202:5,
ASSIST [1] - 269:9 243:15, 252:13, 252:14, 253:6, 202:20
ASSISTANT [1] - 155:16 261:12, 264:24, 265:5, 267:18, BREAKS [4] - 202:21, 202:24, 272:8,
ASSISTED [1] - 180:19 267:20, 272:5, 276:17 272:9
ASSOCIATED [11] - 190:22, 191:20, BASELESS [1] - 266:24 BRIEF [3] - 166:4, 213:21, 275:20
233:22, 237:5, 239:1, 239:4, 242:13, BASIC [1] - 211:12 BRIEFLY [7] - 175:3, 179:4, 199:20,
242:17, 242:20, 246:1, 270:1 BASIS [11] - 164:23, 249:3, 252:11, 199:22, 211:11, 211:17, 231:3
ASSUME [2] - 245:6, 263:18 261:9, 261:21, 261:24, 261:25, BRING [6] - 169:19, 203:3, 214:25,
ASSUMED [2] - 157:11, 157:25 262:14, 265:12, 265:14, 265:16 250:7, 268:24, 274:14
ASSUMING [1] - 246:5 BE [2] - 1:3, 1:4 BROWSER [5] - 192:8, 192:14, 193:2,
ASSURANCE [1] - 209:19 BEAR [1] - 264:14 201:20, 241:11
AT [1] - 157:1 BECOMING [1] - 270:5 BUILT [2] - 199:11, 207:21
ATLANTA [2] - 175:18, 175:23 BEFORE [1] - 155:10 BUNCH [1] - 199:14
ATLANTA [3] - 155:2, 155:25, 157:1 BEHALF [3] - 155:14, 155:17, 155:20 BUREAU [2] - 176:1, 176:6
ATTACHED [4] - 226:15, 230:8, 231:9, BEHIND [1] - 237:22 BUSINESS [5] - 161:12, 161:25, 173:25,
247:1 BELIEVES [1] - 221:8 190:7, 221:13
ATTACHED [1] - 1:6 BELLATOR [4] - 191:5, 191:13, 227:6, BUTTON [1] - 181:12
ATTACHING [1] - 1:9 227:21 BY [52] - 1:4, 1:6, 155:23, 170:16, 171:4,
ATTACHMENT [1] - 235:11 BELONGED [1] - 223:3 171:8, 173:21, 175:8, 177:18, 182:17,
ATTEMPT [4] - 246:1, 246:8, 246:11, BELONGING [1] - 222:8 183:7, 185:24, 188:16, 194:15, 196:1,
262:10 BELOW [1] - 190:8 196:14, 202:11, 203:10, 215:8,
ATTEMPTS [2] - 243:21, 245:18 BENCH [2] - 211:19, 260:20 217:18, 224:6, 224:14, 226:14, 227:1,
ATTORNEY [1] - 178:22 BENCH [7] - 213:19, 213:21, 214:7, 228:4, 229:1, 230:4, 231:8, 233:3,
ATTORNEYS [1] - 155:16 214:9, 263:2, 263:4, 264:19 234:10, 234:20, 235:3, 235:19, 237:2,
AUGUST [2] - 239:16, 240:1 BERNI [1] - 156:3 237:16, 238:14, 239:11, 240:8,
AUTH.SERVICES.ADOBE.COM [4] - BERNI [2] - 159:16, 173:22 240:21, 241:3, 243:6, 246:25, 247:22,
242:19, 243:19, 244:6, 253:19 BEST [9] - 196:10, 216:22, 218:4, 250:6, 250:11, 250:22, 251:17,
AUTHENTICATE [1] - 255:1 219:15, 221:8, 222:18, 223:3, 235:22, 251:23, 253:14, 254:22, 259:7, 269:24
AUTHENTICATED [17] - 244:20, 245:11, 272:5
245:13, 246:6, 250:1, 253:7, 253:22, BETA [1] - 211:14 C
254:1, 254:2, 254:3, 254:10, 254:12, BETTER [3] - 189:20, 194:14, 216:13
CACHE [1] - 232:5
254:15, 254:24, 255:5 BETWEEN [5] - 180:2, 195:8, 203:24,
CALIFORNIA [1] - 182:2
AUTHENTICATING [1] - 244:14 236:9, 274:10
CALLERS [1] - 208:23
AUTHENTICITY [9] - 161:12, 161:25, BEYOND [1] - 218:20
CANADA [1] - 199:12
162:19, 162:22, 162:24, 163:3, BIG [3] - 165:9, 206:25, 277:15
CANADIAN [1] - 181:20
163:25, 164:2, 173:25 BILLING [4] - 207:2, 209:7, 210:7, 210:9
CANDACE [1] - 250:2
AUTHOR [5] - 231:24, 232:2, 232:13, BINDER [3] - 182:18, 182:19, 185:9
CANNOT [3] - 201:2, 210:21, 275:23
233:16, 234:12 BIT [7] - 157:11, 168:21, 189:20, 194:1,
CAPABILITIES [1] - 209:11
AUTHORED [1] - 231:25 212:10, 214:10, 272:3
CAPABILITY [1] - 216:8
AUTHORITY [1] - 181:15 BITLOCKER [5] - 184:20, 184:23,
CAPACITY [1] - 208:22
AUTO [1] - 199:13 184:25, 219:21, 219:22
CAPTURE [2] - 181:7, 215:18
AUTOMATICALLY [2] - 193:2, 209:5 BLACK [1] - 265:22
CARD [2] - 172:2, 172:7
AVAILABLE [8] - 181:8, 197:22, 198:12, BLURRY [4] - 188:8, 194:2, 194:3,
CARDS [2] - 183:16, 223:2
199:1, 201:16, 210:15, 220:12, 272:5 194:4
CARE [1] - 277:19
AWARE [3] - 260:24, 261:23, 267:2 BOARD [1] - 179:15
CARES [1] - 206:8
BOOKMARK [2] - 198:9, 241:9
CARLA [2] - 155:6, 155:20
B BOOKMARKS [2] - 241:12, 241:14
CARRIER [2] - 210:22, 211:1
BORDER [1] - 181:20
BABASIJIBOMI [1] - 155:15 CASE [48] - 158:3, 158:20, 162:6,
BOTTOM [4] - 189:23, 207:3, 228:17,
BABY [1] - 277:7 174:11, 178:19, 183:8, 184:13, 185:5,
252:6
BACK-DOOR [1] - 261:14 186:1, 186:8, 186:15, 188:1, 190:6,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 129 of 145
282
199:21, 206:11, 206:20, 212:8, 253:14, 254:16, 259:3, 261:8, 262:2, CO-DEFENDANTS' [1] - 272:13
215:16, 217:24, 218:3, 218:11, 219:5, 262:9, 262:12, 263:19, 264:1, 264:3, COBB [2] - 179:11, 182:4
221:2, 221:14, 222:5, 222:25, 223:5, 264:8, 266:16, 270:12, 270:24, CODE [1] - 246:16
223:13, 228:10, 233:22, 242:2, 271:20, 273:4, 273:15, 274:16, 277:1, CODES [4] - 245:21, 245:25, 246:15,
258:11, 261:2, 261:12, 261:24, 277:5, 277:12 254:12
261:25, 265:12, 265:14, 265:16, CHAIKEN [6] - 157:23, 213:10, 214:11, COGNIZANT [1] - 263:8
266:3, 266:4, 266:7, 266:8, 267:2, 217:21, 264:19, 266:15 COLLECT [2] - 181:10, 215:12
267:18, 271:25, 275:18, 278:8 CHANCE [2] - 206:11, 272:17 COLLECTED [1] - 187:22
CASE [1] - 181:11 CHANGE [7] - 171:19, 187:17, 231:21, COLLECTING [1] - 181:14
CASE-IN-CHIEF [1] - 212:8 233:23, 256:21, 259:12, 268:23 COLLEGE [1] - 179:23
CASES [8] - 178:9, 178:15, 178:17, CHANGED [6] - 162:10, 180:10, 199:11, COLON [7] - 189:3, 189:4, 189:5, 189:6
179:2, 179:4, 179:8, 198:4, 210:17 225:11, 225:14, 225:17 COLORADO [1] - 180:24
CATACLYSMIC [1] - 162:3 CHANGES [1] - 264:20 COMCAST [6] - 188:19, 188:21, 189:2,
CATALOGING [1] - 195:1 CHANGING [2] - 194:19, 198:6 189:8, 189:11, 189:14
CATER [1] - 216:18 CHARGING [1] - 210:6 COMFORT [1] - 202:5
CATIE [2] - 181:7, 215:18 CHARLES [1] - 189:3 COMING [5] - 183:15, 206:7, 224:25,
CAUSED [1] - 253:19 CHART [2] - 164:24, 168:18 238:20, 261:1
CELL [12] - 161:21, 175:25, 205:20, CHASE.COM [1] - 244:22 COMMENCED [2] - 211:19, 260:20
206:11, 206:14, 206:21, 210:23, CHECK [3] - 175:4, 192:25, 274:25 COMMERCIALLY [1] - 210:15
211:5, 211:9, 211:25, 213:5, 216:20 CHECKED [4] - 199:14, 199:19, 201:21, COMMON [3] - 270:3, 270:5, 270:6
CELLEBRITE [11] - 221:15, 221:17, 243:24 COMMUNICATE [3] - 203:17, 205:6,
221:19, 222:2, 222:5, 228:6, 228:8, CHEW [1] - 273:6 205:15
229:24, 258:20, 258:23, 259:2 CHIEF [1] - 212:8 COMMUNICATED [2] - 157:7, 276:7
CELLPHONE [18] - 174:13, 177:22, CHILD [3] - 179:6, 180:25, 181:12 COMMUNICATIONS [1] - 216:5
180:4, 183:14, 183:15, 204:1, 206:20, CHOOSE [2] - 199:18, 235:20 COMPANY [4] - 178:1, 178:3, 178:7,
206:25, 207:2, 208:6, 209:17, 221:3, CHRISTIAN [1] - 157:10 179:12
221:5, 221:11, 221:22, 222:3, 222:11, CHRONOLOGICALLY [1] - 248:16 COMPEL [1] - 263:22
230:18 CIRCLE [2] - 157:8, 211:13 COMPLAIN [1] - 212:21
CELLPHONES [2] - 178:14, 178:17 CIRCUIT [2] - 275:19, 275:20 COMPLETE [4] - 168:15, 189:13,
CELLULAR [1] - 182:13 CIRCULAR [1] - 262:12 213:19, 263:4
CENTRAL [8] - 162:11, 163:7, 163:24, CITE [1] - 265:18 COMPLETELY [3] - 157:24, 158:9,
164:4, 165:3, 174:24, 175:9 CITE [1] - 1:5 208:8
CERTAIN [5] - 165:1, 199:17, 200:25, CITED [2] - 158:21, 275:19 COMPUTER [43] - 181:2, 183:13,
251:14, 256:18 CIVIL [1] - 178:12 189:15, 192:5, 192:9, 192:16, 192:19,
CERTAINLY [6] - 217:2, 240:18, 253:11, CLAIM [1] - 159:23 197:7, 199:3, 201:1, 201:17, 203:19,
260:14, 272:16, 277:15 CLARIFY [1] - 168:17 225:8, 226:1, 226:4, 226:10, 227:17,
CERTIFICATE [15] - 161:12, 161:25, CLARIFYING [1] - 167:8 230:16, 231:16, 231:18, 231:23,
162:19, 162:20, 162:21, 162:24, CLASSIFY [1] - 241:14 231:25, 232:2, 232:7, 232:21, 232:23,
163:3, 163:6, 163:24, 164:2, 173:25, CLAYTON [1] - 182:4 233:5, 235:21, 239:24, 242:24, 245:9,
174:6, 174:7, 174:10, 174:20 248:7, 250:13, 250:17, 251:4, 251:7,
CLEAR [19] - 161:7, 162:5, 163:11,
CERTIFICATION [1] - 159:22 252:21, 254:7, 257:7, 257:11, 257:20,
168:21, 168:23, 169:8, 169:20, 188:6,
CERTIFIED [1] - 179:18 195:16, 200:25, 218:10, 223:15, 258:3
CERTIFY [1] - 278:6 249:19, 253:15, 264:23, 265:18, COMPUTERS [3] - 186:25, 203:23,
CETERA [1] - 213:23 274:5, 274:8, 276:6 222:13
CHAIKEN [93] - 155:14, 163:14, 182:14, CLEARLY [1] - 158:11 CONCEPT [1] - 203:11
183:3, 185:20, 211:17, 211:21, CLERK [1] - 167:19 CONCERNED [2] - 245:23, 258:11
212:19, 213:11, 213:18, 214:13, CLERK [4] - 161:4, 161:10, 177:7, CONCLUDED [1] - 227:10
217:15, 217:18, 224:4, 224:6, 224:12, 177:14 CONCLUDING [3] - 265:12, 265:16,
224:14, 226:13, 226:14, 226:22, CLICK [3] - 201:20, 245:3, 260:1 271:14
227:1, 227:24, 228:4, 228:24, 229:1, CONCLUSION [4] - 166:12, 184:8,
CLICKING [1] - 193:10
230:2, 230:4, 231:6, 231:8, 233:1, 262:24
CLIENT [2] - 198:4, 222:8
233:3, 234:7, 234:10, 234:17, 234:20, CONDITION [2] - 198:6, 207:23
CLOSE [5] - 205:9, 207:21, 209:4,
235:1, 235:3, 235:18, 235:19, 236:24, CONDUCTED [1] - 178:14
214:15, 269:7
237:2, 237:11, 237:16, 238:8, 238:14, CONFERENCE [9] - 211:19, 213:19,
CLOSELY [1] - 180:23
239:7, 239:11, 240:7, 240:8, 240:17, 213:21, 214:7, 214:9, 260:20, 263:2,
CLOSER [1] - 202:21
240:19, 240:21, 241:1, 241:3, 243:5, 263:4, 264:19
CLOSES [1] - 192:14
243:6, 246:23, 246:25, 247:21,
CLOSING [1] - 272:2 CONFIGURATIONS [1] - 180:2
247:22, 249:25, 250:6, 250:9, 250:11,
CM/ECF [2] - 1:3, 1:5 CONFIRM [2] - 198:12, 200:20
250:19, 250:22, 251:16, 251:17,
CO [1] - 272:13 CONFIRMED [3] - 199:2, 200:22,
251:21, 251:23, 253:10, 253:12,
271:23
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 130 of 145
283
CONFIRMS [1] - 166:3 219:4, 219:6, 219:7, 219:17, 219:18, 198:5, 211:19, 260:20, 276:14
CONFUSED [1] - 242:22 219:22, 219:25, 220:2, 220:5, 220:6, COURT [119] - 1:4, 1:7, 1:10, 155:1,
CONFUSING [1] - 158:12 220:7, 220:9, 220:10, 220:16, 220:22, 155:24, 155:25, 157:1, 157:2, 157:5,
CONFUSION [5] - 162:23, 164:12, 220:23, 220:25, 221:1, 221:15, 159:7, 159:14, 160:13, 160:21,
164:16, 164:17, 164:20 221:22, 222:3, 222:7, 222:15, 222:17, 160:24, 161:6, 161:11, 161:18,
CONNECT [2] - 206:1, 206:3 222:19, 222:20, 222:23, 222:24, 162:19, 163:8, 163:16, 164:6, 164:19,
CONNECTED [7] - 204:23, 207:3, 207:6, 223:1, 223:6, 223:7, 223:17, 223:19, 165:4, 165:9, 165:12, 165:17, 166:7,
208:7, 208:10, 208:12, 217:3 223:20, 223:24, 224:2, 224:7, 224:10, 166:16, 166:21, 167:13, 167:24,
CONNECTION [2] - 189:14, 205:11 224:11, 224:17, 224:21, 224:22, 168:4, 168:10, 168:14, 168:23,
CONNECTIVITY [4] - 203:22, 205:4, 225:2, 225:3, 225:5, 225:6, 225:8, 169:13, 169:17, 169:23, 170:6,
206:5, 207:4 225:17, 225:21, 225:22, 225:24, 173:17, 173:19, 175:4, 175:6, 176:14,
CONSIDER [3] - 183:25, 229:8, 237:24 226:5, 226:9, 226:12, 226:16, 227:12, 176:16, 176:18, 176:22, 177:1, 177:4,
CONSIDERED [1] - 158:10 227:22, 227:23, 228:21, 228:22, 182:16, 183:5, 185:22, 202:4, 202:10,
CONSISTED [1] - 183:12 229:6, 229:7, 229:11, 229:12, 229:15, 202:19, 203:3, 203:5, 203:8, 211:18,
CONSISTENT [1] - 201:3 229:16, 229:19, 230:8, 230:10, 212:10, 213:9, 213:15, 213:20, 214:2,
CONSULTING [2] - 274:4, 274:21 230:21, 230:23, 231:1, 231:4, 231:5, 214:5, 214:17, 214:22, 215:4, 217:11,
231:13, 231:19, 231:20, 231:23, 217:14, 217:16, 240:18, 250:5,
CONT'D [1] - 170:15
232:2, 232:10, 232:11, 232:13, 253:11, 254:18, 254:20, 259:6,
CONT'D).................170 [1] - 156:4
232:19, 232:23, 233:5, 233:6, 233:9, 260:14, 260:18, 262:16, 262:25,
CONTACT [1] - 225:16
233:11, 233:12, 233:14, 233:15, 263:5, 263:12, 263:15, 263:24, 264:5,
CONTAIN [1] - 218:2
234:1, 234:2, 234:5, 234:6, 234:12, 264:9, 264:14, 265:21, 266:15,
CONTAINED [1] - 200:7
234:13, 234:22, 235:12, 235:16, 268:22, 269:2, 269:8, 269:11, 269:16,
CONTENT [4] - 181:3, 193:15, 226:23,
236:18, 236:22, 237:6, 237:7, 237:9, 269:19, 269:23, 270:11, 270:13,
240:15
237:10, 238:1, 238:4, 238:5, 238:6, 270:15, 270:18, 271:2, 271:5, 271:7,
CONTENTIOUS [2] - 157:15
238:16, 238:24, 238:25, 239:5, 271:21, 272:11, 272:20, 272:24,
CONTESTING [1] - 179:7
239:14, 240:24, 240:25, 241:8, 273:10, 273:12, 273:18, 275:24,
CONTEXT [1] - 165:5
241:18, 241:25, 242:2, 242:7, 242:14, 276:17, 277:4, 277:6, 277:13, 277:18,
CONTINUE [5] - 157:20, 170:13, 192:6, 242:15, 242:17, 242:18, 242:20, 278:3, 278:15
192:17, 205:5 243:3, 243:4, 243:7, 243:11, 243:12, COURT'S [2] - 163:10, 163:12
CONTINUED [3] - 168:13, 203:2, 277:21 243:13, 244:7, 244:12, 244:25, 245:4, COURT'S [6] - 161:9, 161:11, 163:19,
CONTINUITY [32] - 203:12, 203:15, 245:9, 247:3, 247:5, 247:9, 247:14, 170:18, 170:21, 265:10
205:4, 205:13, 205:14, 206:2, 222:21, 247:18, 247:24, 247:25, 248:2, 248:7, COURTHOUSE [1] - 276:14
223:6, 223:9, 261:3, 261:10, 261:17, 248:8, 248:10, 248:12, 248:18, COURTROOM [4] - 161:4, 161:10,
262:4, 262:7, 262:13, 262:14, 262:18, 248:22, 248:23, 249:1, 249:2, 249:10, 177:7, 177:14
264:23, 265:7, 265:12, 266:1, 266:2, 249:17, 249:18, 249:23, 249:24, COURTROOM [17] - 157:3, 157:4,
266:21, 267:4, 267:5, 267:6, 267:8, 250:18, 250:24, 251:5, 251:8, 251:19, 159:8, 159:13, 159:21, 170:5, 202:25,
267:11, 268:11, 268:15, 270:3 251:25, 252:8, 252:9, 252:12, 252:19, 203:4, 214:1, 214:3, 214:4, 215:3,
CONTRADICT [1] - 160:11 252:20, 252:22, 252:23, 252:25, 263:11, 263:13, 263:14, 269:18,
CONTROL [1] - 233:15 253:4, 253:25, 254:1, 254:3, 254:8, 272:10
CONTROLLING [1] - 238:23 254:13, 254:14, 255:7, 255:12, COURTS [2] - 182:3, 182:6
CONVENTION [1] - 239:20 255:24, 256:4, 256:23, 257:4, 257:5, COVERAGE [1] - 216:13
CONVERSATION [2] - 223:21, 273:2 257:13, 257:14, 257:18, 258:5, 258:9, CREATE [5] - 179:25, 180:8, 231:16,
CONVERTED [4] - 164:1, 242:5, 242:7, 258:13, 258:16, 258:18, 258:19, 242:1, 260:4
242:9 259:18, 259:21, 260:8, 260:11, 278:7 CREATED [9] - 160:7, 162:14, 197:9,
CONVERTS [1] - 163:23 CORRECTLY [4] - 218:8, 222:4, 255:23, 226:1, 231:13, 232:7, 232:19, 232:22,
CONVICTED [1] - 267:23 257:2 255:22
COORDINATING [1] - 274:11 CORRELATED [1] - 191:15 CREATES [1] - 242:10
COPIED [2] - 160:22, 160:24 CORRELATION [1] - 236:9 CREATING [2] - 233:8, 237:8
COPIES [1] - 249:6 COUDRIET [2] - 155:24, 278:15 CREATION [1] - 233:18
COPY [6] - 160:19, 182:23, 182:24, COUNSEL [5] - 213:21, 271:17, 271:22, CREDENTIALS [1] - 204:16
210:17, 250:7, 264:14 273:7, 275:7 CREDIBILITY [1] - 275:17
CORPORATIONS [1] - 179:14 COUNSEL [1] - 270:18 CRIMINAL [1] - 178:12
CORRECT [242] - 159:24, 165:8, 168:7, COUNT [2] - 187:16, 274:3 CRITERIA [1] - 201:14
169:21, 171:11, 172:8, 172:9, 172:11, COUNTY [6] - 179:11, 182:4, 182:5 CRITERIAS [1] - 219:12
173:2, 175:16, 176:5, 178:20, 178:21, COUPLE [3] - 165:22, 198:14, 199:11 CROSS [12] - 160:9, 164:13, 164:18,
179:1, 179:3, 184:21, 184:23, 186:13, COURSE [3] - 221:12, 272:1, 275:16 165:5, 165:7, 165:24, 167:4, 169:5,
186:14, 187:23, 187:24, 190:10, COURT [9] - 159:17, 166:8, 177:21, 169:15, 170:13, 217:14, 268:19
190:11, 191:21, 194:20, 195:4, 266:5, 266:6, 273:8, 273:9, 274:24, CROSS [4] - 156:4, 156:7, 170:15,
195:19, 197:5, 197:20, 199:4, 200:2, 275:13 217:17
200:15, 201:11, 218:12, 218:13, COURT [7] - 166:13, 182:6, 189:24, CROSS-EXAMINATION [4] - 160:9,
218:22, 218:23, 218:25, 219:1, 219:3,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 131 of 145
284
164:18, 165:5, 165:24 DEFENDANTS [1] - 155:8 259:14, 259:16, 259:19, 262:5, 265:8,
CROSS-EXAMINATION [3] - 156:4, DEFENDANTS' [1] - 272:13 267:6, 268:15, 270:4, 270:8
170:15, 217:17 DEFENSE [6] - 158:18, 158:21, 168:18, DIFFERENCE [5] - 167:25, 168:25,
CROSS-EXAMINATION........................ 178:22, 221:7, 272:14 172:23, 216:1, 216:2
..217 [1] - 156:7 DEFENSE [5] - 170:25, 224:4, 226:22, DIFFERENT [26] - 159:18, 164:11,
CROSS-EXAMINE [1] - 268:19 227:25, 231:6 168:8, 169:7, 169:9, 175:9, 179:24,
CROSS-EXAMINED [2] - 164:13, 167:4 DEGREE [2] - 211:16, 236:12 180:17, 182:3, 183:12, 184:5, 188:24,
CROSS-EXAMINING [1] - 165:7 DEGREES [1] - 211:13 196:6, 196:19, 198:14, 198:22,
CROSSED [3] - 261:10, 261:11, 261:17 DELETED [2] - 236:4, 253:2 203:24, 205:15, 206:4, 208:8, 219:25,
CRR [2] - 155:24, 278:15 DELETES [1] - 240:24 223:16, 240:3, 241:10, 242:5, 255:21
CSO [1] - 269:8 DELIBERATIONS [1] - 272:2 DIFFICULT [2] - 163:20, 184:23
CULL [1] - 195:24 DELPHI [2] - 197:25, 198:1 DIGITAL [6] - 177:22, 178:9, 180:4,
CULL-OUT [1] - 195:24 DEMOCRACY [1] - 271:9 182:12, 186:5, 198:19
CURRENT [3] - 157:6, 159:3, 195:11 DENIED [1] - 165:17 DIGITALLY [1] - 243:24
CUSTOM [5] - 197:23, 198:3, 198:8, DENY [3] - 167:13, 167:14, 200:20 DIMINISHED [1] - 175:22
198:11, 198:25 DEPARTMENTS [2] - 180:17 DIRECT [1] - 248:1
CUSTOMER [2] - 208:14 DEPENDENT [1] - 192:13 DIRECT [2] - 156:6, 177:17
CYBERCRIME [2] - 177:22, 182:12 DEPOSIT [6] - 274:3, 274:9, 274:10, DIRECTLY [3] - 190:22, 191:15, 226:20
CYBERSPACE [1] - 161:20 274:11, 275:2, 276:8 DIRECTOR [2] - 194:8, 250:10
DEPOSITED [1] - 274:25 DISALLOW [1] - 264:10
D DEPRESSED [1] - 181:13 DISALLOWING [1] - 264:11
DEPUTY [4] - 161:4, 161:10, 177:7, DISCLOSE [2] - 212:17, 268:7
DARRELL [52] - 187:22, 211:23, 218:1, DISCLOSED [5] - 162:15, 212:2, 212:6,
177:14
218:11, 218:14, 218:24, 219:3, 219:6, 212:13, 212:15
DESCRIBE [3] - 180:7, 180:22, 181:6
219:19, 221:2, 221:11, 222:6, 222:15, DISCLOSURE [2] - 212:19, 213:13
DESIGNED [4] - 209:20, 216:14, 260:2,
223:16, 224:10, 224:17, 224:20,
266:17 DISCOVERY [4] - 171:13, 183:9,
225:7, 225:20, 228:12, 228:21, 229:6,
DESKTOP [1] - 183:14 189:17, 200:17
229:10, 229:25, 230:7, 230:13,
DESPITE [2] - 253:1, 255:14 DISCUSS [3] - 159:4, 273:13, 276:23
230:22, 231:4, 233:10, 233:14,
DETAIL [1] - 214:8 DISCUSSED [2] - 168:16, 264:18
233:24, 235:7, 235:14, 235:15,
DETAILED [2] - 160:2, 198:17 DISCUSSING [1] - 276:2
236:10, 236:19, 237:17, 237:20,
DETERMINATION [1] - 254:5 DISCUSSION [4] - 203:7, 214:6, 269:12,
237:25, 238:18, 239:5, 239:12, 240:9,
DETERMINATIONS [1] - 187:19 273:3
240:11, 257:16, 257:21, 267:20,
DETERMINE [13] - 184:16, 187:25, DISCUSSIONS [1] - 273:5
267:21, 274:10, 276:7
191:12, 210:19, 219:8, 227:20, DISPUTE [1] - 265:21
DATA [30] - 162:9, 162:15, 164:10,
230:25, 234:15, 236:5, 238:23, DISTANCE [2] - 215:9, 215:24
171:9, 175:25, 179:8, 180:10, 181:18,
241:12, 245:25, 254:12 DISTRICT [6] - 155:1, 155:1, 155:10,
182:13, 184:7, 190:5, 204:5, 220:4,
DETERMINED [1] - 250:16 155:25, 278:3, 278:4
220:8, 221:21, 222:2, 224:23, 224:25,
DEVELOPMENT [2] - 179:14, 181:4 DISTRICT [1] - 182:1
229:13, 229:23, 242:24, 246:16,
248:12, 267:2, 267:15, 267:17, DEVICE [63] - 184:20, 184:24, 185:3, DIVISION [1] - 155:2
267:22, 268:5 186:24, 188:1, 189:10, 195:21, DIVISION [1] - 211:12
DATAS [1] - 183:14 199:17, 199:23, 201:24, 204:5, DIVORCE [1] - 179:8
DATE [11] - 174:2, 174:18, 195:6, 197:6, 204:17, 204:18, 206:6, 206:9, 207:1, DJ [2] - 228:15, 237:17
227:13, 228:17, 228:20, 229:9, 211:23, 211:24, 217:8, 218:11, DOC [1] - 259:25
239:21, 248:16, 251:3 218:18, 222:19, 222:25, 223:1, 223:3, DOC [1] - 239:15
DATED [1] - 251:1 223:5, 223:13, 223:16, 223:19, DOC-20200421-W [1] - 239:17
DATES [1] - 195:13 224:10, 224:17, 224:20, 225:4, DOCKET [1] - 272:12
DAVID [1] - 155:20 225:21, 229:10, 230:22, 230:25, DOCKET [2] - 263:25, 264:4
DAVID [2] - 189:4, 189:5 231:13, 232:16, 232:17, 232:18, DOCKET [2] - 1:6, 155:5
232:19, 233:13, 235:15, 236:10, DOCUMENT [43] - 161:7, 161:13,
DAYS [1] - 1:5
236:14, 236:22, 239:4, 240:11, 163:13, 163:25, 167:5, 167:7, 170:18,
DAYS [3] - 199:15, 212:22, 271:18
244:10, 244:11, 252:12, 259:12, 170:19, 170:23, 170:24, 171:1,
DEADLINE [1] - 263:21
262:6, 262:18, 265:6, 266:20, 267:17, 188:22, 190:14, 191:20, 193:16,
DEAL [3] - 165:9, 170:10, 179:24
267:19, 268:2, 270:1 203:18, 203:20, 225:25, 226:2, 226:4,
DEALING [1] - 180:25
DEVICES [41] - 180:1, 183:8, 183:11, 226:19, 227:2, 229:9, 230:10, 230:13,
DEALT [1] - 190:6
184:15, 186:18, 203:16, 203:21, 230:18, 231:16, 231:17, 231:18,
DECEMBER [1] - 241:4
203:24, 204:1, 205:13, 206:1, 206:2, 231:24, 231:25, 232:1, 232:4, 232:5,
DECIDE [1] - 272:13
219:5, 219:8, 219:12, 219:14, 219:17, 232:6, 233:18, 233:21, 237:18,
DECONSTRUCTED [1] - 207:20
220:11, 220:15, 220:18, 222:8, 223:4, 239:20, 240:5, 243:23, 250:24, 259:24
DEFENDANT [2] - 155:17, 155:20
223:18, 227:20, 236:5, 236:8, 236:11, DOCUMENT [1] - 1:10
DEFENDANT'S [2] - 173:12, 183:2 237:22, 258:7, 258:18, 259:8, 259:11, DOCUMENT [1] - 264:13
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 132 of 145
285
DOCUMENTS [24] - 160:16, 161:24, 253:23, 253:24, 253:25, 255:4 ET [1] - 213:23
165:21, 165:22, 167:7, 169:21, E-MAILED [3] - 160:18, 164:23, 235:15 EVALUATE [2] - 268:8, 268:10
180:19, 191:1, 191:3, 193:8, 201:24, E-MAILS [6] - 160:23, 187:11, 187:18, EVENING [5] - 263:3, 263:9, 269:9,
202:12, 202:15, 213:16, 213:23, 191:2, 194:19, 194:25 271:10, 276:18
231:10, 232:9, 232:12, 232:15, 233:4, EARLIEST [1] - 224:16 EVENT [1] - 248:20
234:4, 234:11, 236:2, 240:4 EASIER [1] - 163:20 EVENT [51] - 196:19, 196:22, 196:25,
DOCX [1] - 259:25 EASILY [1] - 258:23 197:3, 197:6, 197:8, 197:9, 198:20,
DOMAIN [4] - 242:12, 242:19, 242:20 EASTERN [6] - 162:12, 163:24, 164:5, 198:23, 200:4, 200:16, 244:19, 245:8,
DOMAINS [2] - 242:16, 242:17 172:9, 175:10, 175:12 245:16, 245:22, 246:13, 246:15,
DONE [19] - 158:6, 176:9, 181:3, EASY [2] - 201:13, 213:22 246:16, 246:17, 246:19, 247:16,
191:22, 198:15, 200:6, 206:21, EDGE [2] - 184:1, 184:5 248:2, 248:11, 248:16, 248:19, 249:4,
207:18, 214:11, 214:12, 214:14, EDUCATION [1] - 179:21 249:6, 249:20, 250:8, 250:12, 250:13,
214:15, 227:21, 260:3, 263:3, 267:8, EF1E334B665248A5B5550D63A465C 250:16, 250:23, 251:6, 251:12,
271:25, 276:15 1D9 [1] - 229:3 251:18, 252:4, 252:8, 252:10, 252:14,
DOOR [6] - 260:25, 261:7, 261:13, EFFECT [7] - 157:16, 157:19, 158:15, 252:15, 252:17, 252:24, 253:9,
261:14, 261:18, 265:17 192:16, 192:19, 268:9, 268:18 253:18, 254:11, 254:14, 255:7,
DOT [1] - 174:9 EITHER [9] - 157:21, 160:25, 168:24, 255:15, 255:22
DOUBLE [1] - 260:1 181:13, 207:18, 229:17, 268:16, EVENTS [5] - 243:17, 247:17, 247:23,
DOUBLE-CLICK [1] - 260:1 273:7, 276:25 252:18
DOWN [15] - 176:18, 182:5, 194:23, ELECTRONIC [1] - 207:16 EVIDENCE [2] - 181:8, 215:19
207:17, 213:15, 224:12, 233:1, 234:8, ELEMENTS [2] - 198:9, 254:25 EVIDENCE [41] - 160:10, 167:23,
239:10, 241:1, 251:16, 251:22, ELEVENTH [1] - 275:20 167:24, 167:25, 180:11, 207:25,
270:15, 278:7 ELICIT [1] - 265:9 212:7, 220:15, 220:21, 220:24,
DOWNLOAD [1] - 198:23 ELMO [1] - 186:9 220:25, 221:6, 221:9, 225:8, 225:10,
DOWNLOADED [7] - 228:20, 229:9, EMERGENCY [1] - 181:11 225:13, 225:16, 225:19, 230:24,
231:17, 232:15, 232:18, 257:10, 258:1 EMPLOYEE.XLS [2] - 234:22, 235:12 232:1, 238:23, 261:1, 261:9, 262:12,
DOWNLOADS [1] - 235:23 ENCRYPTED [2] - 184:20, 219:22 262:13, 262:17, 266:7, 266:11,
DR [1] - 180:23 266:14, 266:17, 266:22, 268:1,
ENCRYPTION [1] - 185:1
DRIVE [8] - 183:18, 184:5, 184:10, 268:14, 271:18, 271:25, 272:13,
ENCYCLOPEDIA [1] - 160:17
199:13, 219:13, 219:21, 219:22, 249:5 274:2, 274:23, 276:23
END [3] - 202:20, 214:24, 242:16
DROP [2] - 208:25, 277:11 EVIDENTIARY [2] - 220:4, 220:8
ENDED [1] - 218:18
DROPPED [2] - 208:13 EXACT [7] - 216:21, 229:5, 229:9,
ENDING [1] - 237:18
DUE [2] - 166:19, 276:11 230:14, 237:19, 237:25, 239:13
ENDS [1] - 209:25
DULY [1] - 177:11 EXACTLY [8] - 193:14, 195:17, 213:2,
ENFORCEMENT [9] - 177:23, 179:20,
DURING [4] - 164:18, 165:23, 175:18, 217:4, 233:17, 264:6, 266:16, 271:8
180:8, 180:9, 180:12, 180:13, 181:8,
175:22 EXAMINATION [6] - 160:9, 164:18,
210:16, 267:24
DURRETT [33] - 155:18, 159:6, 159:15, 165:5, 165:24, 218:1, 225:7
ENTER [2] - 201:16, 245:3
160:18, 161:16, 164:20, 165:8, EXAMINATION [6] - 156:4, 170:15,
ENTERED [4] - 170:5, 203:4, 215:3,
165:10, 165:16, 166:6, 166:8, 166:19, 175:7, 177:17, 217:17, 254:21
269:18
167:11, 167:17, 168:2, 169:16, EXAMINATION..........................217 [1] -
ENTERPRISES [1] - 179:12
169:22, 170:2, 170:4, 170:14, 170:16, 156:7
ENTERTAINING [1] - 273:23
170:25, 171:2, 171:4, 171:7, 171:8, EXAMINATION.........................177 [1] -
ENTIRE [1] - 248:13
173:11, 173:15, 173:20, 173:21, 156:6
ENTRIES [4] - 256:18, 256:20, 257:3,
175:1, 176:15, 264:2 EXAMINATION.......................254 [1] -
257:4
DURRETT [8] - 162:2, 164:19, 166:7, 156:7
ENTRY [4] - 171:18, 172:20, 250:21,
168:11, 169:3, 169:14, 169:20, 170:13 EXAMINE [4] - 219:5, 219:9, 220:14,
251:21
DURRETT'S [1] - 164:7 268:19
ENTRY [1] - 1:6
DÉJÀ [1] - 263:5 EXAMINED [6] - 164:13, 167:4, 177:12,
ENVELOPE [1] - 190:17
220:24, 222:15, 226:1
EQUALED [1] - 186:8
E EXAMINER [3] - 160:7, 180:4, 181:21
EQUIPMENT [1] - 205:24
EXAMINING [1] - 165:7
E-MAIL [44] - 157:6, 159:1, 161:16, EQUIPPED [1] - 198:16
EXAMPLE [7] - 192:8, 203:18, 203:23,
186:17, 186:18, 186:19, 187:5, 187:7, EQUIVALENT [2] - 190:4, 205:24
204:3, 225:25, 231:15, 232:4
190:7, 190:22, 190:24, 191:4, 191:15, ERROR [1] - 158:13
EXCEEDINGLY [1] - 207:23
192:2, 192:24, 193:2, 193:22, 195:14, ESPECIALLY [4] - 198:3, 212:17, 232:3,
EXCEL [6] - 159:25, 160:6, 161:14,
195:18, 199:2, 200:22, 200:24, 265:7
162:15, 193:12, 234:24
201:17, 227:3, 227:11, 231:17, 235:4, ESQ [6] - 155:14, 155:15, 155:15,
EXCELLENT [1] - 273:25
235:7, 236:13, 243:13, 243:15, 155:18, 155:18, 155:20
EXCEPTION [2] - 219:11, 230:11
243:21, 244:17, 244:24, 245:2, 245:7, ESTABLISHED [1] - 157:12
EXCHANGED [1] - 191:2
245:23, 248:14, 253:20, 253:21, ESTABLISHES [1] - 189:14
EXCLUDE [2] - 166:10, 267:10
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 133 of 145
286
EXCLUDED [3] - 166:9, 260:23, 264:8 F23A [2] - 182:20, 183:2 259:25, 260:1, 260:2, 273:7
EXCLUSIVE [2] - 274:4, 274:20 F23B [3] - 185:10, 185:19, 186:10 FILED [1] - 274:2
EXCLUSIVELY [1] - 210:16 F23C [2] - 226:13, 230:3 FILED [3] - 1:3, 1:8, 1:10
EXCUSED [6] - 157:4, 159:13, 176:21, F23E [1] - 193:5 FILES [24] - 184:6, 193:24, 200:23,
214:4, 263:14, 270:17 F23F [5] - 231:7, 235:18, 239:8, 253:12, 233:25, 235:20, 235:21, 236:6,
EXECUTION [1] - 174:2 253:13 236:14, 236:17, 238:15, 238:19,
EXHAUSTED [1] - 270:22 F23H [2] - 226:23, 227:25 241:15, 242:11, 252:4, 254:4, 255:9,
EXHIBIT [26] - 163:10, 163:12, 170:20, F23I [4] - 194:1, 224:5, 240:19, 246:23 255:13, 255:20, 255:21, 256:1, 257:7,
171:15, 173:13, 173:22, 173:23, F23N [2] - 189:20, 189:23 257:10, 257:19, 257:25
186:10, 188:10, 189:21, 189:23, F23O [1] - 191:8 FINANCIAL [2] - 170:19, 174:13
191:9, 195:5, 196:15, 197:1, 197:4, F23R [4] - 196:13, 243:5, 247:21, 253:13 FINE [5] - 165:12, 188:13, 202:17,
198:7, 226:15, 228:7, 230:8, 231:9, F23T [1] - 185:19 236:25, 273:10
234:7, 240:13, 247:1, 247:7, 260:6 FACT [23] - 162:10, 164:21, 169:9, FIREWALL [1] - 181:16
EXHIBIT [26] - 161:9, 161:11, 163:19, 187:12, 188:21, 213:12, 233:10, FIRST [29] - 160:15, 161:7, 164:18,
170:18, 170:21, 170:25, 171:5, 237:24, 239:19, 242:1, 242:25, 173:24, 174:7, 177:11, 181:7, 181:12,
173:12, 183:2, 188:3, 189:21, 190:1, 245:10, 245:17, 246:6, 255:14, 184:11, 186:1, 186:3, 186:7, 186:23,
191:14, 224:5, 226:23, 227:25, 231:7, 255:25, 256:19, 257:19, 257:25, 188:18, 195:6, 212:16, 214:12,
234:18, 235:2, 237:12, 238:9, 243:3, 258:22, 261:11, 267:19, 267:20 224:23, 249:8, 250:23, 251:7, 256:17,
243:7, 243:18, 250:1 FACTS [4] - 265:10, 267:2, 267:15, 260:4, 261:15, 271:15, 272:1
EXHIBITS [9] - 185:7, 185:12, 185:15, 268:4 FIRST-IN [3] - 224:23, 249:8, 256:17
193:7, 194:8, 218:5, 218:9, 224:7, FACTUALLY [2] - 191:25, 232:7 FIRST-OUT [3] - 224:23, 249:8, 256:17
240:6 FAIL [2] - 208:4, 222:2 FIT [1] - 163:14
EXHIBITS [2] - 185:10, 185:18 FAILED [5] - 221:24, 245:18, 245:20, FITS [1] - 233:22
EXIST [1] - 268:2 246:1, 246:11 FIVE [2] - 202:21, 214:20
EXISTENCE [1] - 274:23 FAIR [2] - 158:22, 259:1 FLAVORS [1] - 188:24
EXISTING [1] - 241:7 FAIRLY [1] - 165:18 FLEETING [2] - 266:18, 268:19
EXISTS [3] - 223:9, 261:10, 267:9 FAITH [1] - 166:1 FLUSHES [1] - 224:24
EXIT [1] - 263:12 FAMILIAR [10] - 199:7, 201:8, 203:11, FOCUS [1] - 171:14
EXITED [4] - 202:25, 214:1, 263:11, 206:14, 210:11, 221:15, 221:17, FOCUSED [1] - 219:13
272:10 239:19, 241:17, 258:20 FODDER [1] - 165:23
EXPAND [1] - 214:9 FAR [5] - 215:9, 215:12, 215:20, 218:1, FOLDER [1] - 235:23
EXPECT [1] - 239:24 271:2 FOLLOWING [1] - 1:2
EXPECTED [2] - 170:8, 271:24 FARGO [1] - 227:7 FOLLOWS [5] - 168:13, 177:12, 203:2,
EXPERIENCE [1] - 179:9 FBI [3] - 180:16, 210:12, 219:25 227:17, 277:21
EXPERIENCES [1] - 215:16 FCC [2] - 216:4, 216:7 FONTS [2] - 196:6
EXPERT [24] - 159:3, 162:13, 164:10, FEATURE [2] - 267:9, 270:3 FOR [2] - 1:5, 155:1
169:12, 181:23, 182:7, 182:13, FEB [2] - 234:21, 235:12 FORCED [1] - 192:14
206:12, 211:25, 212:18, 212:20, FEBRUARY [1] - 155:11 FOREGOING [1] - 278:6
212:24, 212:25, 213:2, 229:22, FEBRUARY [3] - 174:3, 277:21, 278:9 FORENSIC [23] - 160:7, 178:10, 180:4,
229:23, 258:17, 261:6, 262:21, FEDERAL [1] - 216:4 181:10, 182:12, 183:13, 183:20,
262:22, 266:1, 267:1, 267:2, 268:1 FEET [1] - 217:2 183:25, 184:4, 184:10, 184:12,
EXPERT'S [1] - 213:13 FELT [1] - 258:17 184:25, 186:3, 186:6, 186:13, 187:5,
EXPERTISE [1] - 183:22 FEW [2] - 171:14, 202:6 190:3, 198:21, 199:10, 199:13,
EXPERTS [1] - 265:19 FI [1] - 204:24 220:19, 268:1
EXPERTS [1] - 267:14 FIELD [4] - 179:16, 180:20, 181:4, FORENSIC [1] - 197:24
EXPLAIN [6] - 164:4, 211:11, 254:23, 267:14 FORENSICALLY [1] - 268:3
255:13, 257:2, 259:22 FIELD [1] - 181:19 FORENSICS [2] - 177:22, 180:13
EXPLAINED [1] - 270:19 FIFO [3] - 224:23, 249:8, 256:17 FORGETTING [1] - 275:10
EXPLAINS [3] - 162:25, 165:13, 166:2 FIGURE [2] - 236:16, 263:6 FORM [1] - 185:1
EXPLORER [1] - 197:24 FILE [60] - 190:15, 197:8, 197:9, 198:20, FORMAT [1] - 258:11
EXTENT [1] - 233:20 198:24, 227:2, 227:10, 227:17, FORMED [2] - 218:2, 267:18
EXTRACT [2] - 198:19, 198:21 227:18, 227:21, 228:2, 228:20, 229:5, FORMING [3] - 265:20, 267:15, 268:1
EXTRACTING [1] - 221:21 230:14, 231:12, 234:8, 234:15, FORTH [1] - 205:6
EXTRACTION [2] - 222:6, 229:24 234:21, 235:11, 235:14, 235:25, FORWARD [1] - 160:20
EXTRACTS [1] - 222:2 236:1, 237:3, 237:5, 237:19, 237:25, FORWARDED [2] - 161:15, 161:17
EYE [1] - 194:4 238:2, 238:4, 238:15, 238:19, 239:13, FOSTER [2] - 155:7, 155:17
239:14, 239:15, 239:17, 240:2, FOSTER [30] - 171:11, 177:2, 178:19,
F 240:11, 240:12, 240:14, 246:5, 249:4, 186:21, 218:14, 218:22, 218:24,
249:6, 249:7, 251:15, 252:13, 255:17, 219:2, 222:9, 224:9, 224:20, 228:12,
F.2D [1] - 265:19
255:22, 256:2, 256:25, 259:22, 229:11, 230:14, 236:17, 239:13,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 134 of 145
287
240:10, 258:2, 260:24, 264:25, 166:16, 167:8, 186:3, 220:18, 221:6, HEREIN [1] - 177:11
268:12, 268:18, 274:5, 274:12, 221:8, 221:10, 255:6, 260:25, 261:23, HIGH [2] - 176:7, 179:23
274:15, 274:18, 274:22, 275:1, 275:3, 265:11, 266:6, 272:18, 272:21, 274:2, HIGH-STAKES [1] - 176:7
275:10 274:8 HIGHLIGHT [1] - 228:25
FOSTER'S [13] - 162:16, 176:23, GOVERNMENT'S [9] - 168:4, 206:12, HIGHLY [2] - 194:24, 276:10
218:17, 258:1, 266:19, 267:6, 267:12, 212:14, 212:18, 214:22, 263:18, HIMSELF [1] - 218:22
273:7, 274:7, 274:17, 275:5, 275:7, 268:22, 274:14, 276:5 HISTORY [12] - 189:13, 193:10, 195:9,
275:8 GPS [3] - 207:2, 217:2 201:20, 224:22, 240:24, 241:4, 241:8,
FOUNDATION [6] - 157:19, 158:18, GRAB [2] - 269:3, 269:4 241:15, 256:5, 256:17, 256:20
158:23, 261:5, 262:24, 265:24 GRANT [2] - 166:8, 166:25 HIT [3] - 161:21, 187:4, 208:17
FOUR [3] - 219:16, 221:23, 271:18 GREAT [1] - 277:18 HITS [1] - 196:24
FOXTROT [2] - 189:5, 189:6 GREEN [1] - 174:9 HITTING [1] - 161:20
FRAME [1] - 212:17 GROUP [4] - 191:6, 191:13, 227:7, HOLDS [1] - 208:25
FRANKLY [1] - 167:1 227:21 HOLLAND [8] - 194:7, 224:5, 224:13,
FRAUD [1] - 267:24 GUESS [12] - 157:6, 160:15, 161:6, 228:1, 228:24, 233:2, 241:2, 250:20
FRIDAY [1] - 271:13 161:8, 168:23, 170:20, 171:12, HOME [4] - 181:13, 203:19, 239:5
FRIENDLY [1] - 193:1 172:12, 241:2, 264:18, 273:19, 275:24 HOMELAND [1] - 180:16
FROM [1] - 1:9 GUILTY [2] - 272:13, 276:23 HONOR [75] - 159:6, 159:12, 159:15,
FRONT [4] - 182:19, 185:9, 194:6, 255:6 GUN [1] - 157:11 160:4, 160:8, 161:2, 162:4, 164:9,
FUGITIVES [1] - 176:4 GWINNETT [2] - 182:4, 182:5 164:20, 165:16, 166:6, 166:19,
FULL [1] - 1:9 167:11, 167:17, 168:2, 168:7, 168:15,
FULL [14] - 165:6, 165:21, 166:11, H 168:16, 169:7, 169:16, 169:22,
166:23, 200:16, 208:24, 209:1, 209:2, 170:14, 173:11, 173:16, 173:20,
HACKING [2] - 179:7, 225:8
209:5, 209:6, 210:3, 211:13, 216:7, 175:2, 175:3, 175:5, 176:13, 176:15,
HALF [1] - 194:9
277:14 176:17, 176:20, 176:25, 182:14,
HALFWAY [2] - 160:9, 251:18
FULTON [1] - 182:4 183:1, 185:18, 203:9, 211:17, 211:21,
HAND [2] - 177:8, 271:12
FUNDAMENTAL [1] - 275:23 212:4, 212:19, 214:13, 214:20,
HANDED [1] - 161:8
217:10, 217:15, 240:17, 249:25,
HANDLE [2] - 208:22, 209:7
G HANDLES [1] - 181:18
253:10, 254:16, 254:19, 259:3,
260:12, 260:15, 260:22, 261:8, 262:2,
GAME [1] - 158:22 HANDLING [1] - 210:1 263:20, 264:12, 264:21, 266:16,
GAMMA [1] - 211:14 HAPPY [7] - 157:18, 158:17, 164:16, 269:1, 269:5, 269:22, 270:10, 270:12,
GBI [1] - 180:16 167:3, 167:5, 169:17, 276:20 270:14, 270:24, 271:4, 271:20,
GEARS [1] - 241:16 HARD [6] - 183:18, 184:5, 184:10, 272:15, 273:11, 273:15, 274:16,
GENA [9] - 202:12, 232:13, 234:12, 219:21, 219:22, 249:5 274:17, 277:1
260:23, 266:18, 267:11, 268:12, HARDCOPY [1] - 163:18 HONORABLE [1] - 155:10
268:18, 275:5 HARDER [1] - 194:1 HOPEFULLY [2] - 263:9, 277:9
GENERAL [1] - 265:22 HARDWARE [2] - 180:1, 180:3 HOPING [1] - 263:6
GENERALLY [12] - 158:21, 184:24, HAS [1] - 1:8 HOUR [17] - 159:2, 159:20, 164:8,
196:22, 206:8, 210:3, 211:3, 211:14, HASH [5] - 186:2, 186:3, 186:5, 186:7 164:15, 165:23, 165:24, 166:23,
215:14, 217:1, 223:8, 254:25, 270:1 HASHING [3] - 184:9, 185:25 168:1, 168:8, 169:5, 172:23, 175:9,
GENERATED [5] - 245:17, 246:11, HATES [1] - 208:12 175:15, 175:16, 175:17, 213:1, 263:8
248:9, 260:3, 260:5 HEADER [1] - 235:9 HOURS [1] - 165:22
GENTLEMEN [5] - 170:7, 213:20, 271:8, HEADLINES [1] - 275:25 HOUSE [5] - 187:23, 190:18, 190:21,
271:14, 271:22 HEADS [1] - 216:15 267:21, 277:8
GEORGIA [4] - 155:1, 155:25, 157:1, HEALTH [1] - 196:20 HOWEVER [1] - 1:8
278:4 HEAR [8] - 161:23, 176:23, 194:8, HTTPS [1] - 243:18
GEORGIA [1] - 182:1 212:11, 214:7, 268:13, 271:11, 272:1 HUMAN [2] - 195:4, 247:12
GIGS [1] - 249:5 HEARD [3] - 157:23, 208:15, 211:8 HUNDREDS [1] - 206:19
GIVEN [8] - 167:4, 167:5, 211:21, HEARING [3] - 266:23, 274:8, 276:6 HUNTER [1] - 250:2
212:17, 218:11, 222:5, 252:15, 276:22 HEARSAY [11] - 157:14, 261:13, HUSTLE [1] - 202:22
GJPYFROM@GMAIL.COM [1] - 235:5 262:10, 262:15, 262:21, 262:23,
GLASS [1] - 208:25 263:23, 264:12, 265:20, 266:25, 268:6
GLOBAL [2] - 175:18, 175:22
I
HEAVIER [1] - 216:18
GLYNN [1] - 182:5 HELD [1] - 157:1 ICIE [1] - 181:11
GOVERNMENT [6] - 227:24, 234:17, HELP [6] - 164:4, 180:12, 180:24, ICLOUD [22] - 186:22, 195:22, 196:7,
235:2, 237:12, 238:9, 250:1 185:15, 188:3, 258:17 197:14, 206:1, 235:16, 243:10,
GOVERNMENT [1] - 155:14 HELPED [1] - 236:9 243:15, 244:9, 244:17, 245:19,
GOVERNMENT [23] - 159:3, 159:21, HELPING [1] - 268:8 247:13, 248:20, 248:25, 249:22,
161:8, 161:24, 162:1, 163:17, 165:24, HEREBY [1] - 278:6 251:24, 253:2, 253:20, 254:24,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 135 of 145
288
266:20, 269:25 INFERENCE [1] - 257:18 IPOD [1] - 204:1
ICLOUD-BASED [1] - 243:15 INFLUENCE [1] - 230:15 IPODS [1] - 222:22
ICLOUD.COM [2] - 196:10, 245:9 INFORMATION [36] - 159:18, 163:5, IPS [1] - 188:24
ID [11] - 197:6, 204:2, 204:25, 246:13, 168:17, 168:19, 169:11, 174:16, IRON [1] - 181:16
246:15, 246:17, 251:13, 252:14, 181:14, 184:6, 184:16, 184:18, IS [1] - 1:2
252:16, 255:15, 255:22 187:21, 190:21, 191:14, 192:5, ISSUE [32] - 157:5, 157:9, 157:15,
IDEA [7] - 160:24, 175:21, 203:20, 193:14, 196:22, 197:22, 198:6, 201:3, 157:22, 158:25, 159:1, 159:14,
212:11, 264:24, 266:22, 268:20 201:13, 205:7, 210:23, 211:5, 225:17, 162:25, 164:14, 165:6, 165:14,
IDENTIFIED [6] - 219:16, 219:17, 249:8, 255:16, 255:18, 259:15, 261:2, 165:15, 165:19, 166:22, 166:24,
219:21, 232:12, 234:11, 237:19 261:21, 262:6, 266:2, 266:4, 272:6, 167:3, 167:6, 167:12, 167:16, 168:16,
IDENTIFIER [1] - 205:24 277:14 169:9, 249:20, 261:3, 263:23, 266:2,
IDENTIFY [6] - 189:9, 223:5, 225:8, INFORMATION'S [1] - 204:18 266:18, 269:6, 273:12, 273:16,
225:10, 225:13, 225:16 INFORMED [2] - 215:20, 271:23 273:21, 276:11
IDENTITY [9] - 244:18, 245:10, 245:12, INITIAL [2] - 162:21, 208:17 ISSUED [2] - 174:1, 174:21
245:19, 245:23, 274:21, 275:1, INSIDE [3] - 197:8, 245:4, 247:2 ISSUES [5] - 207:17, 270:21, 273:20,
275:14, 275:15 INSTALL [1] - 249:10 273:22
IDS [1] - 252:15 INSTALLED [2] - 249:16, 251:3 IT'LL [2] - 161:21, 163:14
IEF [4] - 199:7, 199:16, 199:20, 199:25 INSTANCE [2] - 195:11 ITEM [1] - 227:4
IEMI [1] - 205:25 INSTANCES [2] - 195:5, 195:17 ITEMS [1] - 227:6
ILLUSTRATOR [1] - 241:21 INSTEAD [2] - 169:6, 277:10 ITSELF [6] - 198:20, 227:16, 231:13,
IMAC [1] - 203:18 INSTRUCTION [1] - 276:9 240:24, 252:16, 256:18
IMAGE [9] - 183:13, 183:20, 183:25, INSTRUCTIONS [2] - 202:24, 272:8
184:8, 184:10, 186:3, 186:6, 186:13, INSTRUCTOR [3] - 179:18, 179:19, J
198:21 180:5
J.P [1] - 155:10
IMAGED [1] - 183:15 INTEGRITY [1] - 251:15
JACKSON [1] - 269:6
IMAGES [4] - 184:11, 184:12, 187:6, INTELLECTUAL [1] - 179:6
JACKSON [2] - 155:6, 155:20
220:19 INTELLIGENCE [1] - 190:3
JAMES [1] - 156:3
IMAGINE [2] - 165:14, 165:18 INTERACTING [2] - 190:24, 247:10
JAN [2] - 234:21, 235:12
IMAGING [1] - 184:4 INTERACTION [3] - 195:4, 241:10,
JAN-FEB [2] - 234:21, 235:12
IMEI [2] - 205:23, 206:9 247:12
JB [1] - 179:12
IMPACT [1] - 220:25 INTERNAL [2] - 189:21, 191:9
JIM [2] - 156:5, 177:10
IMPLICATION [3] - 255:9, 274:4, 276:9 INTERNALLY [1] - 184:6
JIM [3] - 177:2, 177:16, 180:23
IMPORT [1] - 198:23 INTERNATIONAL [1] - 205:23
JOB [9] - 195:9, 207:5, 208:5, 208:9,
IMPORTANT [5] - 207:23, 209:15, INTERNET [15] - 181:2, 181:9, 181:11,
208:11, 209:3, 211:3, 211:14, 229:20
209:16, 218:6, 220:11 195:9, 205:2, 205:4, 205:11, 208:6,
JUDGE [3] - 160:22, 161:1, 185:21
IMPOSE [1] - 163:17 224:22, 240:23, 241:4, 241:7, 241:14,
JUDGE [1] - 155:10
IN [3] - 1:3, 1:4, 157:1 256:5, 256:17
JUDGE [1] - 161:5
INADMISSIBLE [1] - 268:5 INTERRUPT [2] - 160:13, 202:4
JULY [5] - 171:17, 171:18, 172:14,
INC [1] - 177:25 INTERVIEW [4] - 261:25, 262:3, 267:24,
172:21, 173:1
INCLUDE [6] - 174:16, 183:14, 199:17, 275:4
JUMPED [1] - 157:11
212:15, 218:5, 235:20 INVESTIGATION [5] - 157:24, 158:2,
JUNE [2] - 195:8
INCLUDED [9] - 162:16, 172:3, 172:5, 158:9, 158:16, 234:14
JUROR [2] - 277:2, 277:15
174:18, 199:25, 200:3, 218:8, 232:8, INVESTIGATIONS [2] - 177:25, 179:10
JURY [46] - 162:12, 165:13, 166:4,
243:17 INVESTIGATIONS [1] - 178:14
167:2, 167:6, 169:15, 169:19, 170:5,
INCLUDES [2] - 181:20, 203:25 INVESTIGATIVE [2] - 181:8, 215:18
170:7, 175:14, 176:9, 185:15, 202:25,
INCLUDING [3] - 186:17, 200:8, 272:9 INVESTIGATOR [3] - 179:17, 179:18,
203:3, 203:4, 213:17, 213:20, 213:24,
INCOMPLETE [2] - 220:16, 220:17 181:22
214:1, 214:25, 215:3, 223:8, 230:24,
INCONSISTENCIES [1] - 158:4 INVOLVED [4] - 178:10, 179:5, 229:22,
238:22, 249:20, 250:8, 253:16,
INCONSISTENCY [1] - 275:23 237:8
260:17, 263:8, 263:11, 266:9, 266:23,
INCONSISTENT [1] - 276:10 INVOLVES [2] - 179:8, 274:1
266:25, 268:7, 268:8, 268:10, 268:13,
INCORPORATED [2] - 178:6, 210:7 INVOLVING [1] - 178:17
268:25, 269:3, 269:18, 270:19, 271:8,
INCREASINGLY [1] - 270:6 IP [9] - 187:25, 188:17, 188:19, 188:23,
271:14, 271:22, 272:10, 276:8
INDEPENDENT [1] - 248:7 188:25, 189:9, 189:11, 189:16
JURY [1] - 155:9
INDEX [1] - 273:19 IP4 [1] - 188:25
INDICATED [1] - 191:3 IP6 [2] - 188:25, 189:3
INDICATION [1] - 231:22 IPAD [3] - 203:25, 205:18, 266:21
K
INDIVIDUAL [5] - 187:22, 192:7, 209:18, IPADS [1] - 222:22 KAUSHAL [1] - 226:6
226:21, 251:13 IPHONE [1] - 262:17 KAUSHAL [5] - 155:15, 168:15, 169:7,
INDIVIDUAL'S [1] - 181:1 IPHONES [2] - 221:23, 222:22 169:25, 170:3
KEEP [12] - 158:11, 192:16, 195:10,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 136 of 145
289
207:4, 208:6, 208:9, 208:11, 211:3, LEEWAY [1] - 211:21 LOG-IN [5] - 224:16, 246:1, 256:21,
217:3, 251:13, 253:17, 266:23 LEFT [6] - 193:16, 197:5, 228:5, 228:14, 260:9
KEEPING [1] - 200:5 230:5, 253:7 LOG-INS [4] - 224:9, 240:23, 256:9,
KEEPS [1] - 193:9 LEIGH [1] - 155:18 256:24
KEPT [4] - 216:9, 249:6, 266:5 LEIGH [1] - 160:20 LOGGED [25] - 187:13, 192:18, 192:19,
KEY [2] - 185:2, 205:3 LENOVO [1] - 222:17 192:22, 195:1, 197:18, 201:17, 204:2,
KEYBOARD [1] - 257:24 LESS [3] - 175:24, 214:20, 214:21 204:11, 204:15, 204:24, 204:25,
KIND [13] - 167:5, 174:8, 179:7, 179:15, LETTER [4] - 190:15, 190:16, 265:22, 205:8, 219:3, 225:20, 226:21, 243:10,
199:4, 200:5, 202:22, 216:4, 219:25, 274:19 244:11, 244:17, 253:19, 253:23,
229:16, 233:22, 252:18, 272:5 LETTERS [1] - 254:7 255:2, 255:16, 255:17, 266:20
KINDS [1] - 267:15 LICENSED [2] - 179:17 LOGGING [3] - 204:16, 247:17
KNOWING [3] - 230:13, 236:22, 268:12 LICENSING [1] - 179:15 LOGS [21] - 196:19, 200:4, 200:11,
KNOWLEDGE [3] - 175:21, 259:8, LIFT [1] - 277:10 200:14, 200:17, 245:17, 246:11,
269:25 LIKELIHOOD [1] - 266:1 248:2, 248:11, 248:16, 248:20,
KNOWN [1] - 212:23 LIMINE [6] - 263:18, 263:19, 263:21, 248:21, 248:22, 250:13, 250:16,
KNOWS [3] - 190:17, 193:13, 261:20 274:1, 276:13, 276:16 252:8, 252:10, 252:24, 253:18, 257:1
KYLE [1] - 158:20 LIMIT [2] - 223:21, 236:23 LONGITUDE [1] - 211:6
LIMITATION [1] - 201:18 LOOK [42] - 158:20, 165:10, 167:20,
L LIMITED [3] - 192:4, 248:22, 259:19 167:22, 169:21, 172:19, 173:7, 181:9,
LINE [13] - 158:21, 163:1, 167:10, 207:3, 182:18, 183:8, 183:22, 185:9, 186:20,
LABELED [1] - 193:20 194:22, 195:20, 198:17, 198:21,
211:22, 214:18, 227:4, 227:6, 236:24,
LADIES [5] - 170:7, 213:20, 271:8, 199:20, 200:16, 201:4, 213:16,
237:13, 250:21, 255:11, 256:6
271:14, 271:22 213:23, 214:8, 223:16, 223:23,
LINE [1] - 1:7
LAID [3] - 157:21, 158:23 228:23, 230:24, 236:12, 238:7, 239:7,
LINES [2] - 238:12, 239:9
LANGUAGE [1] - 197:25 243:25, 245:25, 246:14, 248:13,
LINK [1] - 201:21
LAPTOP [20] - 183:14, 183:20, 187:20, 249:12, 251:11, 254:11, 259:8,
LINKED [1] - 204:7
218:2, 218:15, 219:19, 222:15, 263:16, 276:20
LIST [9] - 193:23, 210:25, 232:8, 237:20,
222:17, 223:19, 223:21, 228:21, LOOKED [18] - 158:5, 158:6, 164:25,
238:15, 239:14, 243:18, 248:22,
229:6, 231:4, 236:21, 237:20, 243:10, 166:1, 167:21, 167:22, 200:7, 201:8,
273:24
249:9, 249:16, 249:22, 257:22 220:22, 223:13, 230:6, 240:10,
LISTED [4] - 172:16, 195:13, 232:12,
LARGE [1] - 162:15 245:21, 248:11, 248:13, 257:7, 257:8,
234:12
LAST [12] - 157:9, 157:13, 157:18, 258:8
LISTENER [2] - 157:17, 157:19
160:23, 164:22, 168:16, 168:17, LOOKING [12] - 161:7, 166:14, 171:17,
LISTENING [1] - 184:2
169:6, 234:9, 262:25, 263:5, 269:7 191:17, 198:10, 233:20, 235:25,
LISTING [1] - 235:20
LATE [1] - 178:6 239:16, 242:23, 252:10, 267:22,
LISTS [1] - 168:8
LATELY [1] - 221:23 271:17
LIVE [1] - 190:16
LATITUDE [1] - 211:6 LOOKS [6] - 161:25, 174:2, 228:6,
LIVES [1] - 272:5
LAUNCH [1] - 201:20 230:11, 237:21, 267:17
LNK [5] - 227:15, 227:17, 227:18,
LAUNDERING [1] - 274:3 LOOKUP [2] - 188:20, 189:7
259:22, 259:24
LAW [11] - 177:23, 179:19, 180:8, 180:9, LOSE [1] - 203:21
LNK [2] - 259:24, 259:25
180:12, 180:13, 181:8, 210:15, LOW [1] - 206:19
LOAD [1] - 193:14
265:18, 267:24, 275:18 LOWER [1] - 212:10
LAWN [2] - 216:13, 216:14 LOANS [1] - 236:1
LUNCH [5] - 159:2, 164:8, 165:24,
LAY [5] - 157:19, 158:18, 261:5, 262:23, LOCATED [1] - 208:24
169:5, 170:8
265:24 LOCATION [1] - 211:7
LAYER [1] - 157:16 LOCATIONS [4] - 168:9, 174:18,
205:15, 216:21
M
LAYERS [1] - 157:14
LOCKED [1] - 275:6 MAGNET [1] - 199:10
LAYPERSON [3] - 183:21, 258:24,
LOG [59] - 192:11, 192:15, 193:3, MAIL [47] - 157:6, 159:1, 161:16,
258:25
196:21, 196:23, 196:25, 197:3, 197:8, 186:17, 186:18, 186:19, 187:5, 187:7,
LEADING [2] - 159:17, 259:3
198:23, 200:23, 218:25, 224:9, 190:7, 190:17, 190:22, 190:24, 191:4,
LEAP [1] - 253:4
224:16, 240:23, 243:21, 243:25, 191:15, 192:2, 192:24, 193:2, 193:22,
LEARN [2] - 216:6, 216:7
244:13, 244:16, 245:5, 245:8, 245:16, 195:14, 195:18, 199:2, 200:22,
LEARNED [1] - 186:23
245:18, 245:22, 246:1, 246:5, 246:8, 200:24, 201:17, 227:3, 227:11,
LEAST [5] - 181:21, 241:7, 273:24,
246:11, 246:19, 247:16, 248:13, 231:17, 235:4, 235:7, 236:13, 243:13,
276:18, 276:22
249:4, 249:6, 250:8, 250:23, 251:6, 243:15, 243:21, 244:17, 244:24,
LEAVE [4] - 192:8, 203:19, 204:17,
251:12, 251:18, 252:4, 252:17, 253:9, 245:2, 245:7, 245:23, 247:2, 247:11,
263:9
254:4, 254:14, 255:7, 255:13, 255:15, 248:14, 253:20, 253:21, 253:23,
LEAVING [1] - 276:8
255:17, 255:19, 255:21, 255:25, 253:24, 253:25, 255:4
LEE [8] - 157:6, 159:2, 160:20, 161:9,
256:1, 256:9, 256:21, 256:24, 260:9, MAIL.YAHOO.COM [1] - 227:16
161:15, 161:17, 163:18, 277:7
262:5 MAILED [3] - 160:18, 164:23, 235:15
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 137 of 145
290
MAILS [6] - 160:23, 187:11, 187:18, 194:23, 228:1 165:8, 165:10, 165:16, 166:6, 166:8,
191:2, 194:19, 194:25 MIDMORNING [1] - 270:19 166:19, 167:11, 167:17, 168:2,
MAINTAIN [1] - 180:25 MIGHT [9] - 216:18, 259:24, 260:18, 169:16, 169:22, 170:2, 170:4, 170:14,
MAINTAINING [1] - 251:14 260:19, 265:12, 265:16, 269:16, 170:16, 170:25, 171:2, 171:4, 171:7,
MAINTENANCE [2] - 207:18, 207:22 271:19, 271:25 171:8, 173:11, 173:15, 173:20,
MAJOR [1] - 179:14 MILE [1] - 216:25 173:21, 175:1, 176:15, 176:25, 177:2,
MAJORITY [1] - 270:8 MILES [1] - 215:14 177:18, 182:11, 182:14, 182:17,
MANNER [2] - 166:11, 181:10 MILITARY [4] - 171:19, 171:24, 176:2, 183:1, 183:3, 183:6, 183:7, 185:18,
MAPPING [2] - 206:21, 210:11 181:20 185:20, 185:23, 185:24, 188:11,
MARK [2] - 163:9, 163:12 MINE [1] - 233:16 188:14, 188:16, 194:7, 194:12,
MARKED [6] - 170:17, 186:9, 191:8, MINOR [3] - 166:24, 167:2, 168:25 194:15, 195:24, 196:1, 196:13,
193:4, 193:25, 207:9 MINUTE [2] - 210:6, 269:16 196:14, 202:8, 202:11, 202:17, 203:9,
MARSHALL [5] - 173:17, 175:4, 176:16, MINUTES [8] - 165:2, 169:2, 202:6, 203:10, 211:17, 211:21, 212:4,
254:18, 270:13 209:8, 210:4, 212:2, 212:23, 214:21 212:12, 212:19, 213:6, 213:11,
MARSHALL [17] - 155:20, 160:22, MISSING [1] - 176:4 213:18, 214:13, 214:20, 215:7, 215:8,
161:1, 173:18, 175:5, 176:17, 182:15, MISTRIAL [7] - 160:8, 164:7, 165:15, 217:10, 217:12, 217:15, 217:18,
183:4, 185:21, 188:10, 188:12, 165:18, 166:9, 166:25, 167:15 224:4, 224:6, 224:12, 224:14, 226:13,
188:15, 250:4, 254:19, 269:5, 269:10, MOBILE [1] - 205:23 226:14, 226:22, 227:1, 227:24, 228:4,
270:14 MODIFYING [1] - 237:9 228:24, 229:1, 230:2, 230:4, 231:6,
MATCH [8] - 186:6, 186:7, 186:13, 231:8, 233:1, 233:3, 234:7, 234:10,
MOMENT [7] - 160:21, 161:18, 161:19,
197:3, 198:9, 219:13, 236:13, 248:14 234:17, 234:20, 235:1, 235:3, 235:18,
240:17, 253:10, 263:15, 273:1
235:19, 236:24, 237:2, 237:11,
MATCHES [3] - 184:10, 190:4, 239:21 MONDAY [4] - 271:11, 272:8, 276:21,
237:16, 238:8, 238:14, 239:7, 239:11,
MATERIAL [1] - 261:5 276:23
240:7, 240:8, 240:17, 240:19, 240:21,
MATERIALS [3] - 258:12, 261:12, MONEY [4] - 198:4, 198:5, 274:3,
241:1, 241:3, 243:5, 243:6, 246:23,
275:13 274:20
246:25, 247:21, 247:22, 249:25,
MATTER [2] - 236:19, 260:16 MONITOR [1] - 181:1
250:3, 250:6, 250:9, 250:11, 250:19,
MAY [2] - 1:3, 1:5 MONITORING [1] - 209:23
250:22, 251:16, 251:17, 251:21,
MEAN [16] - 161:24, 165:14, 165:20, MOORE [12] - 155:15, 162:4, 162:21,
251:23, 253:10, 253:12, 253:14,
168:24, 173:24, 192:11, 200:8, 164:2, 164:9, 168:7, 171:1, 173:13,
254:16, 254:22, 259:3, 259:5, 259:7,
207:24, 231:12, 234:4, 252:6, 253:4, 173:16, 175:3, 175:8, 176:12
260:12, 260:15, 260:22, 261:8,
254:23, 255:13, 264:10, 265:21 MOORE [4] - 163:22, 168:6, 175:6,
261:19, 262:2, 262:8, 262:9, 262:11,
MEANING [1] - 193:1 226:7
262:12, 262:17, 263:19, 264:1, 264:2,
MEANS [1] - 198:20 MORNING [5] - 157:9, 157:12, 157:22,
264:3, 264:8, 264:12, 264:21, 265:24,
MEANT [2] - 253:13, 268:20 165:5, 276:21
266:16, 269:1, 269:14, 269:21,
MEDIA [1] - 186:5 MOST [4] - 193:9, 193:23, 195:11,
269:24, 270:10, 270:12, 270:24,
MEET [2] - 217:22, 217:23 233:22 271:1, 271:4, 271:6, 271:20, 272:15,
MEG [1] - 249:7 MOTHER [1] - 277:9 272:23, 273:4, 273:11, 273:15,
MEGS [1] - 249:4 MOTION [18] - 167:13, 167:14, 260:22, 273:16, 273:25, 274:16, 276:1, 277:1,
MEMBERSHIP [1] - 179:16 263:16, 263:17, 263:18, 263:19, 277:5, 277:12
MEMO [1] - 276:5 263:20, 263:21, 263:22, 263:23, MULTIPLE [2] - 203:16, 267:7
MEMORANDUM [1] - 274:19 264:17, 272:12, 274:1, 274:14, MURDER [1] - 179:6
MEMORY [1] - 264:16 276:12, 276:16, 276:22
MUST [2] - 253:2, 267:1
MENTIONED [2] - 194:18, 276:19 MOUNT [2] - 184:11, 219:14
MENTIONS [1] - 191:14 MOUNTING [1] - 219:10
MOVE [10] - 160:8, 170:25, 173:11,
N
MESSAGE [9] - 228:1, 228:5, 228:10,
228:11, 228:14, 228:25, 230:6, 182:11, 183:1, 185:18, 208:10, NAME [18] - 177:15, 187:22, 197:7,
237:14, 237:15 214:14, 215:6, 249:25 217:21, 228:2, 229:5, 233:10, 233:21,
MESSAGED [1] - 229:11 MOVED [1] - 267:10 233:25, 234:3, 234:21, 237:3, 239:13,
MESSAGES [10] - 205:12, 238:13, MOVING [3] - 271:15, 271:24, 272:3 239:14, 239:15, 239:17, 240:2
239:12, 247:5, 247:8, 257:8, 257:17, MR [31] - 160:22, 161:1, 162:4, 162:21, NAMERK [1] - 190:7
257:19, 274:10, 274:11 164:2, 164:9, 168:7, 168:15, 169:7, NAMES [5] - 199:11, 235:25, 236:1,
MESSAGING [1] - 204:20 169:25, 170:3, 171:1, 173:13, 173:16, 238:16, 238:19
METADATA [17] - 201:24, 202:12, 173:18, 175:3, 175:5, 175:8, 176:12, NAMING [1] - 239:20
231:4, 231:10, 231:12, 231:18, 176:17, 182:15, 183:4, 185:21, NATIVE [1] - 198:19
231:21, 232:8, 232:9, 232:10, 233:4, 188:10, 188:12, 188:15, 250:4, NECESSARILY [8] - 197:13, 216:6,
233:11, 233:17, 233:23, 234:1, 234:3, 254:19, 269:5, 269:10, 270:14 216:12, 220:17, 231:12, 231:25,
237:5 MRU [1] - 193:9 232:3, 273:20
MICROSOFT [3] - 198:22, 251:13, MRUS [1] - 193:8 NECESSITATE [1] - 213:24
252:13 MS [187] - 159:6, 159:15, 160:18, NEED [16] - 159:4, 167:1, 168:10,
MIDDLE [5] - 182:1, 182:3, 184:2, 161:14, 161:16, 163:14, 164:20, 170:10, 175:15, 175:16, 180:12,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 138 of 145
291
192:9, 209:19, 213:22, 255:17, 212:14, 212:21, 212:23, 254:2, 268:17 OPINION [37] - 201:7, 201:12, 208:17,
260:15, 264:1, 272:20, 272:25, 273:13 OCCUPATION [1] - 177:21 212:17, 215:20, 216:1, 216:2, 218:6,
NEEDED [2] - 164:5, 258:17 OCCUR [1] - 173:4 218:10, 218:17, 220:21, 226:18,
NEEDLE [1] - 184:1 OF [10] - 1:2, 1:5, 1:6, 155:1, 155:4, 229:8, 244:18, 246:6, 246:7, 246:10,
NETWORK [1] - 205:3 155:9, 155:14, 155:17, 155:20, 278:4 253:1, 254:15, 255:2, 256:1, 261:9,
NEVER [4] - 165:1, 182:9, 265:21, OFF-THE-RECORD [3] - 203:7, 269:12, 261:12, 261:15, 265:5, 265:9, 266:3,
266:19 273:3 266:4, 266:24, 267:1, 267:3, 267:10,
NEW [13] - 159:14, 160:10, 160:15, OFFER [3] - 212:24, 220:21, 267:10 267:13, 267:15, 268:7, 268:8, 268:11
163:5, 167:23, 167:24, 169:9, 173:14, OFFERED [4] - 157:14, 222:21, 261:8, OPINIONS [12] - 211:23, 212:24,
192:15, 208:9, 245:5, 249:16, 251:4 267:3 213:11, 213:14, 218:2, 220:25,
NEW [1] - 182:2 OFFERING [1] - 218:17 222:21, 230:15, 265:20, 266:1,
NEWER [1] - 224:25 OFFERS [1] - 181:17 267:18, 268:1
NEWLY [1] - 277:9 OFFICE [4] - 225:25, 226:7, 231:15, OPPORTUNITY [1] - 276:3
NEXT [3] - 202:6, 264:6, 272:1 248:3 OPPOSE [1] - 164:9
NICE [2] - 217:22, 217:23 OFFICER [5] - 179:11, 179:19, 199:12, OPPOSED [1] - 232:18
NIGHT [7] - 157:9, 157:13, 157:18, 214:25, 267:24 OPPOSITE [1] - 258:5
164:22, 168:17, 169:6, 269:7 OFFICER [2] - 203:3, 269:3 OPTIONAL [1] - 205:10
NO [1] - 155:5 OFFICIAL [6] - 1:2, 1:3, 1:4, 1:8, 155:24, OR [1] - 1:9
NOBODY [1] - 229:14 278:15 ORDEAL [1] - 277:14
NON [1] - 171:24 OFFLINE [1] - 207:19 ORDER [5] - 183:24, 193:17, 205:9,
NON-MILITARY [1] - 171:24 OFFSET [1] - 190:15 265:11, 270:21
NONE [2] - 158:9, 211:25 OFTEN [3] - 175:23, 192:2, 193:13 ORDERED [1] - 160:4
NORMAL [1] - 183:21 OHIO [1] - 182:2 ORGANIZATIONAL [1] - 171:3
NORMALLY [6] - 166:20, 169:10, OLD [1] - 167:25 ORGANIZED [1] - 248:16
210:22, 210:25, 211:1, 221:13 OLDER [1] - 224:24 ORIGINAL [5] - 163:3, 163:4, 170:19,
NORTHBOUND [1] - 211:15 ON [3] - 155:14, 155:17, 155:20 171:13, 184:10
NORTHERN [2] - 155:1, 278:4 ONCE [6] - 201:6, 201:17, 204:16, ORIGINALLY [1] - 164:3
NORTHERN [1] - 182:1 208:21, 210:3, 256:3 OTHERWISE [2] - 158:12, 268:5
NOTATIONS [1] - 257:1 ONE [68] - 157:14, 160:5, 160:18, OUNCES [1] - 208:25
NOTE [2] - 227:15, 276:14 160:21, 160:23, 161:25, 163:14, OUTER [2] - 184:1, 184:5
NOTES [1] - 163:6 163:23, 164:15, 164:21, 167:24, OUTPUT [2] - 216:6, 216:19
NOTHING [13] - 176:13, 233:7, 233:25, 168:8, 173:14, 175:9, 175:15, 176:23, OUTSIDE [2] - 186:25, 260:16
244:10, 245:12, 251:10, 254:16, 181:21, 184:19, 184:20, 184:22, OUTWEIGHS [1] - 268:9
256:1, 262:4, 262:9, 274:22, 275:16 186:22, 187:5, 193:7, 195:23, 198:22, OVERALL [1] - 196:20
NOTIFIED [1] - 167:19 199:5, 200:18, 200:19, 201:4, 202:8, OVERCROWDED [1] - 208:5
NOTIFY [2] - 181:14, 273:8 204:5, 207:17, 209:25, 210:1, 210:2, OVERCROWDING [1] - 208:15
NOW'S [1] - 208:9 211:16, 217:10, 217:21, 221:25, OVERLOADED [3] - 208:7, 209:13,
NUMBER [2] - 1:6, 1:7 223:19, 224:7, 234:11, 234:18, 209:22
NUMBER [31] - 163:1, 179:24, 185:4, 236:25, 238:9, 238:10, 240:12, OWN [4] - 197:23, 198:2, 210:17, 248:6
187:16, 188:10, 189:1, 189:7, 189:21, 240:13, 240:17, 242:10, 243:9, OWNER [1] - 178:7
189:24, 191:17, 197:7, 198:22, 246:19, 251:24, 252:2, 255:22,
255:23, 256:25, 257:22, 258:2,
204:24, 205:6, 205:24, 206:9, 219:11, P
219:23, 227:4, 227:6, 234:8, 238:23, 260:12, 262:25, 263:5, 265:6, 266:12,
267:1, 270:20 P-E-R-S-I-N-G-E-R [1] - 177:16
239:2, 239:5, 239:23, 246:13, 252:14,
ONE'S [1] - 271:12 P.M [15] - 168:12, 168:13, 170:5, 172:6,
255:15, 263:25, 267:1
ONE-TIME [1] - 201:4 172:8, 202:25, 203:1, 203:2, 203:4,
NUMBER [1] - 191:14
ONES [3] - 180:11, 240:5, 252:2 214:1, 215:3, 263:11, 269:18, 272:10,
NUMBERING [1] - 220:1
ONLY [2] - 1:3, 1:7 277:20
NUMBERS [4] - 190:19, 238:5, 239:22,
OPEN [11] - 191:2, 192:7, 192:8, 192:16, PAD [1] - 206:4
246:15
192:17, 193:1, 231:20, 240:12, 245:5, PAGE [18] - 156:2, 163:15, 172:2,
NUMERIC [1] - 193:16
253:8, 261:18 172:13, 172:25, 224:12, 233:1, 234:7,
OPEN [1] - 157:1 234:9, 236:24, 237:12, 238:8, 238:10,
O 238:11, 239:7, 239:8, 241:2, 250:19
OPENED [11] - 187:11, 192:10, 193:18,
OBJECTION [13] - 173:16, 173:18, 193:24, 260:25, 261:7, 261:13, PAGE [1] - 1:7
182:14, 182:15, 183:3, 183:4, 185:20, 265:17, 274:21, 274:24, 274:25 PAGES [10] - 200:18, 200:19, 248:2,
185:21, 214:23, 215:5, 250:3, 250:4, OPENING [3] - 187:18, 193:12, 194:25 252:7, 252:8, 252:10, 252:24, 255:14,
259:3 OPENS [1] - 260:1 255:25, 278:6
OBSERVED [1] - 267:3 OPERATING [2] - 209:19, 268:15 PAINTING [1] - 190:7
OBTAIN [1] - 210:16 OPINE [1] - 267:8 PAIRED [1] - 205:14
OBVIOUSLY [7] - 187:9, 203:15, OPINING [3] - 230:19, 232:22, 261:22 PAN [1] - 233:16
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 139 of 145
292
PANDEMIC [2] - 175:19, 175:22 PHONE [26] - 160:4, 183:16, 204:2, 266:8, 276:4
PAPER [1] - 255:6 204:6, 204:7, 204:23, 204:24, 205:5, PRESENTED [1] - 275:13
PARALEGAL [1] - 163:18 205:9, 205:11, 206:3, 209:4, 209:8, PRETRIAL [3] - 260:22, 263:16, 263:17
PARENTHESES [1] - 193:21 213:2, 215:12, 215:13, 217:4, 217:6, PRETTY [4] - 158:11, 199:12, 236:23,
PART [20] - 157:16, 158:2, 158:10, 222:6, 229:13, 229:14, 229:25, 274:5
171:10, 178:15, 190:14, 193:23, 262:19, 264:25, 266:21 PREVENTS [1] - 185:1
193:25, 195:24, 212:13, 215:18, PHONES [1] - 239:1 PREVIOUSLY [4] - 217:24, 228:9,
228:8, 229:20, 244:13, 245:14, 254:9, PHONETIC/SIC [1] - 186:21 250:1, 250:14
263:22, 267:13, 268:4, 272:1 PHRONT [4] - 191:5, 191:13, 227:6, PRIMARILY [1] - 241:21
PARTIAL [1] - 1:9 227:21 PRIMARY [1] - 200:4
PARTICULAR [7] - 190:5, 200:6, PHYSICAL [4] - 201:19, 211:6, 227:18, PRINCIPLE [1] - 265:22
209:17, 230:25, 231:1, 249:5, 267:14 250:7 PRINT [4] - 163:10, 163:11, 163:18,
PASSWORD [25] - 184:24, 187:10, PHYSICALLY [1] - 205:15 163:21
192:23, 201:9, 201:16, 218:20, PIECES [3] - 160:10, 180:11, 181:9 PRINTOUT [2] - 247:7, 247:13
218:22, 218:25, 225:10, 225:20, PILOT [1] - 199:13 PRITTY [2] - 155:24, 278:15
245:3, 253:25, 254:25, 255:3, 260:25, PINGED [1] - 207:24 PRIVATE [2] - 179:17
262:1, 262:3, 262:5, 262:15, 262:20, PINGS [1] - 206:21 PROBATION [1] - 181:1
265:2, 265:8, 266:19, 267:25, 268:13 PLACE [3] - 197:6, 207:1, 261:15 PROBATIVE [1] - 268:8
PAST [1] - 212:2 PLACES [1] - 267:7 PROBLEM [3] - 166:15, 166:17, 167:18
PATENTED [2] - 181:12, 181:16 PLAN [2] - 272:5, 276:24 PROCEDURE [1] - 277:6
PATTERNS [1] - 175:19 PLANNING [2] - 213:4, 272:4 PROCEEDING [1] - 274:18
PAUSE [1] - 171:3 PLAYER34 [3] - 262:3, 262:15, 266:19 PROCEEDINGS [4] - 168:12, 203:1,
PAY [1] - 164:24 PLEAS [2] - 272:13, 276:23 277:20, 278:7
PAY [5] - 172:17, 173:4, 173:7, 174:10, PLETHORA [1] - 252:15 PROCEEDINGS [2] - 155:9, 157:1
174:16 PM [4] - 155:6, 157:1, 177:25, 179:10 PROCESS [9] - 180:24, 184:4, 184:8,
PAYCARD [1] - 162:18 POINT [16] - 160:9, 176:23, 182:11, 184:9, 185:25, 193:11, 193:13, 198:5,
PAYCARDS [1] - 162:17 192:17, 199:13, 202:6, 213:13, 276:11
PAYMENT [3] - 275:4, 275:9 214:14, 261:4, 261:7, 261:23, 265:2, PRODUCED [5] - 181:3, 210:22, 212:8,
PAYROLL [2] - 234:21, 235:12 266:9, 274:13, 276:2, 276:12 248:21
PDF [9] - 1:2, 227:5, 241:21, 241:22, POINTED [1] - 244:15 PRODUCT [2] - 162:8, 261:10
241:24, 242:4, 242:5, 242:7, 242:10 POINTING [1] - 211:14 PRODUCTS [2] - 241:17, 242:13
PDFS [1] - 200:18 POLICE [5] - 179:11, 179:19, 180:17, PROFESSIONAL [1] - 179:15
PEACHTREE [1] - 190:16 181:21, 199:12 PROGNOSIS [1] - 271:19
PENNY [2] - 155:24, 278:15 POPULATIONS [1] - 216:18 PROGRAM [2] - 242:6, 258:22
PEOPLE [4] - 196:2, 215:23, 233:22 PORNOGRAPHERS [1] - 180:25 PROGRAMMING [1] - 197:25
PER [1] - 189:11 PORNOGRAPHY [1] - 179:6 PROGRESS [1] - 273:4
PERCENT [1] - 174:12 PORTION [1] - 195:25 PROHIBITED [1] - 1:9
PERFECT [1] - 277:12 PORTION [1] - 1:5 PROMISE [1] - 272:4
PERFECTLY [1] - 209:20 PORTIONS [1] - 251:14 PROPERTY [1] - 179:7
PERHAPS [1] - 277:9 POSITION [1] - 272:14 PROPONENT [1] - 268:6
PERIOD [1] - 1:5 POSITIONS [1] - 276:11 PROPOSE [1] - 272:17
PERIOD [1] - 187:10 POSITIVE [3] - 187:4, 196:12, 248:21 PROPRIETARY [1] - 221:25
PERMANENTLY [1] - 207:21 POSSESSION [2] - 217:6, 230:17 PROSECUTION [1] - 178:25
PERSINGER [2] - 156:5, 177:10 POSSIBLE [1] - 204:20 PROSECUTORS [1] - 217:21
PERSINGER [23] - 177:2, 177:16, POST [1] - 179:18 PROTECTED [1] - 184:24
177:19, 182:12, 189:9, 203:11, POTENTIALLY [3] - 198:4, 209:13, PROTECTION [1] - 181:17
217:19, 228:5, 230:5, 240:22, 241:17, 217:8 PROVIDE [5] - 169:10, 183:18, 186:4,
242:22, 244:21, 246:18, 249:9, 250:7, PPP [1] - 236:1 211:6, 216:20
251:19, 253:16, 254:23, 264:22, PRECLUDE [1] - 266:17 PROVIDED [31] - 159:22, 160:3, 160:6,
265:25, 267:16, 269:25 PREGNANT [1] - 277:9 160:10, 160:12, 162:8, 162:9, 162:13,
PERSINGER'S [2] - 228:2, 268:10 PREJUDICE [1] - 167:4 163:4, 163:6, 166:11, 167:8, 169:10,
PERSON [10] - 183:21, 187:9, 190:23, PREJUDICIAL [2] - 268:9, 268:17 170:17, 182:24, 183:9, 184:15, 187:6,
201:15, 218:21, 227:10, 253:5, PREMISES [1] - 266:25 187:21, 188:20, 199:21, 200:17,
257:24, 260:3, 265:7 PREPARATION [2] - 158:1, 168:20 206:12, 210:25, 229:14, 242:4, 248:3,
PERSON'S [4] - 193:9, 233:21, 241:10, PREPARE [2] - 185:7, 217:24 258:12, 259:19, 261:21
255:16 PREPARED [7] - 185:12, 191:9, 196:15, PROVIDER [13] - 188:19, 205:22,
PERSONAL [1] - 175:21 224:7, 227:2, 229:19, 231:9 205:25, 206:8, 206:10, 207:3, 208:6,
PERSONALLY [1] - 267:3 PRESENCE [1] - 260:17 208:12, 208:14, 208:24, 209:2, 211:3,
PERSONS [2] - 176:4, 270:22 PRESENT [5] - 211:20, 260:21, 265:15, 211:4
PETER [1] - 233:16
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 140 of 145
293
PROVIDERS [1] - 210:5 QUICKIE [2] - 214:9, 263:6 RECORD'S [1] - 161:7
PROXIMITY [1] - 227:9 QUICKLY [11] - 181:22, 193:14, 248:17, RECORDED [1] - 251:12
PUBLICLY [3] - 197:22, 198:12, 199:1 248:22, 249:7, 249:22, 255:10, RECORDED [1] - 155:23
PUBLICLY-AVAILABLE [3] - 197:22, 255:13, 255:20, 256:2, 272:3 RECORDS [34] - 159:19, 159:22,
198:12, 199:1 161:12, 162:1, 162:5, 163:4, 163:7,
PUBLISH [9] - 224:4, 226:22, 227:24, R 164:3, 164:21, 164:22, 164:24,
231:6, 234:17, 235:1, 237:11, 243:5, 165:11, 166:14, 166:18, 168:18,
RADIUS [3] - 209:18, 216:23, 216:25
250:9 169:10, 173:25, 174:8, 174:9, 174:13,
RAISE [1] - 177:7
PULL [23] - 194:7, 194:9, 196:13, 174:14, 174:17, 174:21, 184:6, 192:5,
RAISED [1] - 164:17
226:23, 226:24, 228:1, 228:2, 230:2, 205:21, 206:14, 206:16, 206:20,
RAISING [1] - 271:12
234:8, 236:25, 237:13, 237:14, 207:22, 208:16, 210:22, 211:5, 212:20
RANGE [1] - 216:11
238:11, 238:13, 239:9, 240:7, 250:20, RECROSS [2] - 176:14, 270:11
RANK [1] - 262:10
251:21, 253:12, 263:24, 264:4 REDACTION [1] - 230:12
RAPID [10] - 162:16, 162:18, 164:24,
PULLED [2] - 248:12, 264:4 REDIRECT [3] - 156:7, 175:7, 254:21
172:2, 172:7, 172:17, 173:4, 173:7,
PULSE [1] - 271:9 REDIRECT [1] - 254:20
174:10, 174:16
PURE [1] - 181:10 REDIRECTED [1] - 209:10
RATHER [2] - 214:15, 271:11
PURGE [7] - 195:10, 248:22, 251:14, REDIRECTS [1] - 209:7
RE [1] - 255:22
255:18, 255:20, 256:2, 256:18 REFERENCE [1] - 195:22
RE-CREATED [1] - 255:22
PURGED [3] - 248:17, 251:10, 252:11 REFERENCED [1] - 247:23
REACH [3] - 215:10, 215:21, 216:11
PURGES [3] - 249:8, 255:16, 255:22 REFERENCES [6] - 196:3, 218:9,
REACHED [1] - 258:10
PURGING [5] - 248:25, 249:3, 249:23, 241:15, 248:25, 249:22, 251:24
READ [6] - 174:22, 187:11, 192:24,
255:10, 255:13 REFERENCING [1] - 1:7
194:1, 229:20, 247:8
PURPOSE [3] - 206:24, 265:4, 276:7 REFERENCING [1] - 253:17
READER [3] - 241:21, 241:22, 241:24
PURPOSES [2] - 207:2, 210:7 REFERRING [3] - 246:16, 246:17, 260:6
READILY [1] - 201:16
PURSUANT [1] - 173:12 REFLECT [4] - 168:22, 169:1, 208:17,
READING [2] - 158:15, 194:25
PUSH [1] - 181:13 244:16
READY [2] - 169:3, 224:24
PUT [17] - 187:1, 188:5, 190:2, 190:16, REFLECTED [5] - 171:22, 171:24,
REAL [2] - 246:23, 263:1
190:20, 192:23, 200:22, 207:1, 172:10, 172:20, 173:8
207:20, 208:7, 209:18, 216:15, REALIZED [3] - 165:25, 166:14, 166:17 REFLECTS [1] - 173:1
219:12, 239:14, 255:6, 266:25, 274:23 REALLY [10] - 165:15, 184:4, 188:7, REFRESH [1] - 249:12
PUTS [2] - 199:12, 210:4 189:11, 192:6, 192:21, 201:19, 216:4,
REFRESHED [1] - 264:16
PUTTING [2] - 201:14, 217:3 233:17, 236:16
REGARDING [2] - 157:9, 159:2
REASON [9] - 207:19, 249:21, 259:10,
PYFROM [16] - 232:13, 234:12, 260:24, REGARDLESS [1] - 198:25
261:19, 265:1, 268:13, 268:23,
264:25, 266:18, 267:11, 268:12, REGISTER [1] - 208:16
275:12, 276:18
268:18, 274:4, 274:7, 274:15, 274:17, REGULAR [2] - 262:3, 266:19
274:18, 274:20, 275:5, 275:8 REASONABLY [1] - 267:14
REGULATED [1] - 216:4
PYFROM'S [1] - 202:12 REASONS [2] - 197:16, 200:8
REHASH [2] - 186:2, 186:6
PYFROM-FOSTER [6] - 260:24, 264:25, REASSEMBLED [1] - 184:7
REID [1] - 277:7
268:12, 268:18, 274:15, 274:18 REBUTTAL [5] - 211:25, 212:6, 212:15,
RELATED [11] - 160:10, 162:5, 188:21,
PYFROM-FOSTER'S [4] - 274:7, 212:17, 212:20
190:20, 191:4, 224:20, 226:20,
274:17, 275:5, 275:8 REBUTTING [1] - 275:14
229:17, 236:1, 247:17, 275:17
RECALLED [3] - 169:24, 215:2, 269:13
RELATES [1] - 226:19
RECEIVE [6] - 204:6, 205:7, 205:11,
Q 205:12, 215:13, 219:14
RELEASED [1] - 170:8
QAT02 [2] - 222:16, 236:14 RELEVANCE [3] - 158:8, 223:12, 261:3
RECEIVED [6] - 162:21, 164:3, 187:4,
QAT08 [1] - 219:24 RELEVANT [10] - 162:12, 175:14,
212:18, 219:12, 272:12
184:16, 184:18, 218:6, 220:15,
QAT09 [1] - 220:2 RECEIVING [1] - 276:8
236:15, 261:2, 265:13, 266:23
QAT10 [1] - 220:6 RECENT [1] - 193:8
RELIABLE [1] - 221:21
QUALIFIED [4] - 157:16, 181:23, 182:7, RECENTLY [2] - 193:9, 193:23
RELIED [6] - 159:25, 164:10, 168:19,
182:9 RECESS [4] - 168:12, 169:1, 203:1,
171:10, 261:5, 262:22
QUALIFY [1] - 182:12 277:20
RELIES [4] - 176:6, 261:6, 262:23,
QUESTIONED [2] - 264:22 RECOGNIZE [5] - 170:18, 170:19,
268:1
QUESTIONING [6] - 158:22, 159:16, 170:23, 170:24, 228:5
RELY [5] - 205:1, 238:22, 262:24,
211:22, 214:19, 255:11, 256:6 RECOGNIZED [1] - 165:21
265:20, 267:14
QUESTIONS [9] - 164:15, 175:2, 175:5, RECOLLECTION [1] - 249:12
RELYING [1] - 209:17
217:12, 225:14, 257:6, 269:14, RECORD [22] - 162:5, 168:15, 168:22,
REMEMBER [16] - 185:3, 192:22,
269:21, 270:10 169:1, 169:3, 177:15, 184:1, 192:8,
196:10, 201:21, 202:15, 206:25,
QUICK [7] - 165:13, 213:22, 246:24, 192:15, 192:17, 203:6, 203:7, 203:8,
207:9, 208:5, 208:11, 210:5, 235:22,
260:19, 263:1, 269:5 255:20, 269:11, 269:12, 269:15,
256:6, 256:7, 257:6, 257:15, 274:18
QUICKER [1] - 271:24 272:20, 273:1, 273:3, 273:13
REMIND [1] - 211:11
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 141 of 145
294
REMINDED [2] - 202:23, 272:8 RETAINED [1] - 178:19 271:15
REMOVE [1] - 231:21 RETIRED [2] - 179:11, 199:11 SECONDARY [3] - 209:24, 209:25,
RENEW [1] - 276:12 RETURN [2] - 245:25, 248:21 210:4
RENEWING [2] - 274:1, 274:13 RETURNED [1] - 245:22 SECONDS [2] - 197:10, 246:20
REPEAT [1] - 192:9 RETURNS [2] - 187:1, 196:12 SECRET [2] - 157:10, 180:16
REPEATEDLY [2] - 201:5, 267:16 REVIEW [14] - 165:22, 183:22, 183:24, SECTORS [3] - 211:8, 211:12, 211:16
REPETITIVE [1] - 192:6 201:23, 206:11, 221:2, 221:5, 222:8, SECURITY [1] - 180:16
REPHRASE [1] - 259:5 222:11, 222:13, 222:25, 239:1, 239:4, SECURITY [24] - 196:21, 196:22,
REPLACE [1] - 207:21 248:4 196:25, 225:13, 244:13, 244:16,
REPLY [1] - 276:16 REVIEWED [13] - 158:1, 206:16, 207:7, 244:20, 245:8, 245:14, 245:17,
REPORT [2] - 234:21, 235:12 220:2, 220:6, 220:8, 248:1, 248:6, 245:22, 246:8, 246:10, 247:16,
REPORT [75] - 157:10, 159:16, 159:19, 249:9, 249:16, 250:14, 252:17, 275:11 247:17, 248:11, 250:12, 250:16,
159:24, 160:1, 160:2, 162:14, 168:20, REVIEWING [2] - 184:15, 261:16 250:23, 252:4, 252:18, 254:14
171:10, 172:1, 172:3, 172:7, 172:13, RF23I [1] - 194:7 SECURITY-RELATED [1] - 247:17
172:25, 173:1, 173:2, 173:5, 174:16, RMR [2] - 155:24, 278:15 SEE [92] - 157:18, 158:18, 158:23,
185:5, 185:7, 185:13, 188:3, 191:10, ROOM [2] - 213:24, 263:8 159:9, 160:15, 162:1, 162:2, 165:20,
199:7, 199:16, 199:20, 200:1, 200:6, ROUGHLY [2] - 178:9, 249:5 166:22, 167:5, 171:1, 172:2, 173:13,
201:3, 206:12, 207:7, 207:10, 207:12, ROUTERS [1] - 180:1 173:24, 174:2, 174:6, 185:15, 186:2,
207:25, 209:12, 210:2, 211:23, 212:5, ROW [2] - 193:19, 194:22 186:17, 187:4, 187:10, 188:6, 188:21,
212:7, 212:13, 212:14, 212:22, 213:7, RULE [8] - 173:12, 212:16, 212:19, 189:12, 189:13, 189:20, 190:14,
213:12, 217:24, 218:2, 218:6, 218:8, 229:21, 265:18, 266:17, 266:24 191:1, 191:5, 191:15, 192:4, 193:7,
219:16, 226:16, 228:3, 229:17, RULE [2] - 213:6, 213:13 193:15, 193:21, 194:2, 194:16,
229:18, 229:22, 229:23, 230:8, RULING [8] - 157:12, 158:17, 263:17, 194:18, 195:9, 195:12, 196:2, 196:4,
231:10, 242:2, 242:23, 243:1, 243:9, 264:7, 264:8, 264:10, 268:23, 276:19 197:5, 197:13, 198:7, 199:5, 200:11,
247:1, 248:9, 248:15, 249:13, 249:21, RUN [2] - 198:8, 199:14 201:20, 214:24, 221:6, 224:15, 226:1,
259:2, 261:20, 263:20, 264:23, 267:9, RUNNING [1] - 204:17 226:4, 228:11, 228:14, 228:17, 229:2,
272:21 RURAL [1] - 216:19 229:4, 229:22, 229:23, 229:24, 235:4,
REPORTER [4] - 1:4, 1:8, 155:24, RUSH [1] - 175:17 235:25, 236:9, 236:13, 236:20, 237:3,
278:15 237:17, 237:21, 238:2, 238:4, 238:18,
REPORTER [2] - 211:19, 260:20 239:15, 239:25, 240:2, 240:4, 241:4,
S 241:6, 243:20, 243:24, 245:20, 250:8,
REPORTING [1] - 206:9
REPORTS [3] - 209:2, 229:21, 258:23 SAFE [2] - 181:10, 271:17 251:12, 256:9, 263:3, 263:9, 264:20,
REPRESENT [2] - 190:19, 228:9 SAMIR [1] - 155:15 268:23, 272:7, 275:10, 276:18
REPRESENTATION [1] - 214:23 SARALIENE [1] - 170:1 SEEING [7] - 173:24, 187:12, 187:13,
REPRESENTED [1] - 168:5 SARALIENE [1] - 155:18 188:3, 195:13, 197:1, 197:3
REQUEST [5] - 163:17, 164:7, 169:6, SATISFIED [2] - 268:16, 275:22 SEEM [2] - 162:2, 166:25
169:11, 202:5 SAVE [3] - 198:4, 198:17, 260:19 SEES [2] - 192:10, 209:4
REQUESTED [2] - 168:17, 210:23 SAW [3] - 191:19, 201:3, 229:17 SEIZED [6] - 187:23, 219:6, 233:13,
REQUESTS [2] - 169:8 SCHEDULING [1] - 270:21 239:5, 259:17, 267:20
REQUIRE [2] - 193:3, 213:6 SCHOOL [5] - 179:23, 181:14, 277:8, SELECT [2] - 199:16, 235:24
REQUIRED [3] - 205:8, 212:6, 255:1 277:10, 277:11 SELECTION [1] - 190:15
REQUIRES [5] - 205:22, 212:16, SCOPE [2] - 192:4, 220:19 SEND [7] - 161:4, 161:5, 190:15, 211:4,
212:19, 213:8, 213:13 SCREEN [3] - 172:20, 173:8, 194:16 213:17, 259:1, 276:20
RERECORD [2] - 253:8, 255:17 SCRIPT [2] - 198:8, 198:11 SENDING [1] - 213:24
RESEARCH [2] - 179:13, 180:19 SCRIPTS [5] - 198:2, 198:3, 198:15, SENSE [3] - 215:10, 215:13, 258:14
RESIDENCE [1] - 219:6 199:1, 263:22 SENT [22] - 157:6, 159:24, 165:25,
RESOURCE [2] - 243:18, 245:9 SCROLL [1] - 241:1 166:1, 166:2, 169:5, 191:3, 230:6,
RESPECT [1] - 166:19 SE [1] - 189:11 230:13, 230:18, 235:7, 237:17,
RESPOND [3] - 272:14, 272:16, 272:25 SEARCH [1] - 181:19 237:21, 237:25, 238:18, 239:13,
SEARCH [12] - 186:16, 187:1, 190:5, 239:20, 239:23, 257:11, 257:16,
RESPONDED [1] - 264:20
190:20, 196:9, 196:23, 198:9, 201:14, 257:20, 258:1
RESPONSE [4] - 169:11, 212:24, 273:7,
219:11, 236:14, 236:20 SENTENCING [7] - 274:7, 274:17,
277:17
SEARCHING [2] - 196:2, 196:5 274:19, 275:8, 276:4, 276:5, 276:6
RESPONSIBLE [3] - 274:6, 274:9,
SEAT [1] - 257:24 SEPARATE [3] - 157:24, 158:9, 275:2
274:15
SEATED [8] - 168:14, 170:6, 203:5, SEQUENCE [1] - 220:1
REST [2] - 240:12, 277:19
214:5, 215:4, 263:15, 269:19, 272:11 SERIAL [1] - 205:24
RESTATE [1] - 210:24
SECOND [1] - 275:18 SERIES [2] - 239:22, 257:6
RESTRICTED [1] - 1:4
SECOND [12] - 161:13, 174:22, 191:16, SERVERS [1] - 180:2
RESULT [1] - 274:21
195:23, 197:21, 199:6, 217:10, SERVICE [5] - 188:19, 207:18, 207:20,
RESULTS [3] - 198:11, 199:15, 201:14
234:19, 260:13, 263:22, 267:13, 207:22, 253:8
RESUME [2] - 182:23, 203:20
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 142 of 145
295
SERVICE [2] - 157:10, 180:16 199:10, 210:11, 210:18, 210:19, STARTS [4] - 184:1, 184:5, 210:10,
SESSION [1] - 155:6 221:21, 249:10, 249:16, 251:3, 251:4, 237:3
SET [5] - 239:12, 248:17, 248:22, 251:7 STATE [3] - 177:14, 181:21, 182:6
252:11, 276:6 SOLUTION [1] - 272:17 STATEMENT [20] - 165:13, 166:4,
SETS [1] - 275:20 SOMEONE [21] - 161:4, 166:20, 183:21, 167:2, 167:6, 191:6, 191:13, 226:15,
SEVEN [2] - 215:14, 216:25 187:13, 192:12, 192:18, 195:2, 227:7, 227:22, 240:9, 260:23, 261:4,
SEVEN-MILE [1] - 216:25 195:13, 201:4, 202:5, 204:20, 225:19, 261:14, 262:15, 266:17, 266:18,
SEVERAL [5] - 180:16, 182:2, 182:6, 242:9, 253:17, 253:19, 253:23, 255:2, 267:23, 268:14, 268:19, 275:7
196:19, 277:14 267:23, 269:4 STATEMENTS [2] - 157:10, 274:14
SHEET [1] - 162:15 SOMETIMES [2] - 163:20, 198:3 STATES [3] - 174:24, 182:3, 182:6
SHERIFF'S [1] - 180:17 SOMEWHERE [3] - 211:1, 254:7, STATES [2] - 180:18, 265:19
SHIELD [1] - 181:16 263:18 STATES [6] - 155:1, 155:4, 155:10,
SHIPS [1] - 199:19 SONGS [1] - 184:3 155:16, 155:25, 278:3
SHORT [3] - 159:1, 179:21, 270:20 SORRY [30] - 160:21, 161:1, 161:2, STAY [4] - 192:19, 192:21, 207:5,
SHORTCUT [7] - 259:25, 260:1, 260:2, 161:15, 170:21, 171:18, 178:2, 182:5, 234:18
260:4, 260:5, 260:9 188:6, 197:2, 202:5, 204:14, 210:24, STAYS [2] - 192:18, 255:17
SHORTEN [2] - 216:11, 216:12 212:12, 213:25, 218:7, 221:16, STENOGRAPHICALLY [1] - 155:23
SHORTER [2] - 202:20, 215:24 226:24, 228:13, 234:18, 238:9, STEP [8] - 157:2, 159:5, 159:6, 159:7,
SHORTLY [2] - 227:3, 263:10 239:15, 241:23, 253:13, 260:16, 164:17, 176:18, 214:2, 270:15
SHOW [17] - 171:5, 171:7, 172:1, 263:9, 269:22, 271:5 STICK [2] - 271:10, 271:12
172:13, 172:25, 173:22, 189:19, SORT [9] - 179:4, 179:21, 194:9, 201:4, STILL [18] - 179:13, 180:10, 192:10,
190:12, 193:4, 193:25, 205:20, 225:5, 204:23, 206:24, 216:23, 258:5, 258:7 194:2, 194:4, 198:8, 198:9, 204:24,
227:2, 233:16, 274:14, 274:23, 276:19 SOUNDS [5] - 166:2, 169:18, 214:22, 204:25, 205:6, 205:11, 205:12,
SHOWED [3] - 247:2, 247:5, 247:7 273:5, 273:22 205:15, 208:16, 208:17, 256:25
SHOWING [3] - 172:11, 186:10, 191:8 SOURCE [2] - 197:7, 232:20 STITES [5] - 157:2, 158:1, 159:10,
SHOWN [3] - 175:17, 243:3, 260:7 SOURCES [1] - 205:7 270:25, 271:3
SHOWS [13] - 189:20, 190:1, 190:6, SPECIAL [3] - 157:2, 157:25, 159:9 STOCK [1] - 198:15
190:7, 190:9, 196:18, 224:9, 233:16, SPECIALIST [1] - 178:10 STOOD [3] - 265:11, 266:6, 266:10
243:9, 244:2, 244:10, 245:9, 246:7 SPECIALISTS [1] - 184:25 STOP [1] - 202:17
SIC [1] - 205:25 SPECIFIC [2] - 252:16, 276:8 STOPPED [1] - 253:6
SIDE [14] - 221:7, 227:25, 230:2, 230:3, SPECIFICALLY [3] - 219:16, 274:9, STOPPING [1] - 202:6
237:12, 238:8, 238:11, 239:8, 276:25 275:12 STORE [1] - 189:11
SIDES [1] - 179:2 SPECIFICS [2] - 276:20 STORED [1] - 224:22
SIGNAL [1] - 217:3 SPECULATION [1] - 259:4 STREAMLINED [1] - 198:5
SIGNED [1] - 243:24 SPED [1] - 193:11 STRIKE [1] - 167:14
SIGNIFICANT [1] - 268:17 SPELL [1] - 177:15 STRING [6] - 190:4, 190:5, 190:20,
SIM [3] - 183:16, 223:2 SPENT [1] - 215:19 196:23, 198:9, 238:5
SIMILAR [5] - 204:5, 216:17, 247:13, SPONGE [1] - 192:5 STRUGGLED [1] - 201:15
276:15 SPREADSHEET [21] - 159:25, 160:6, STRUGGLING [1] - 264:20
SIMPLE [2] - 165:18, 166:24 161:14, 162:20, 162:22, 163:8, 163:9, STUDYING [1] - 215:19
SIMPLY [3] - 193:10, 244:8, 255:16 163:12, 163:23, 164:25, 167:18, SUBJECT [1] - 267:16
SINGLE [2] - 211:24, 245:8 171:2, 171:13, 171:23, 172:11, SUBPOENA [1] - 211:4
SIT [2] - 213:15, 269:17 172:19, 173:7, 193:12, 193:13, 234:24 SUBSTANTIAL [1] - 166:22
SITE [8] - 175:25, 205:21, 206:12, SPREADSHEETS [1] - 163:20 SUBSTANTIALLY [1] - 268:9
206:21, 210:23, 211:9, 211:25, 213:5 SPRINKLER [1] - 216:15 SUCCESSFUL [3] - 246:4, 246:8,
SITUATION [3] - 208:5, 246:9, 276:15 SPRINKLERS [2] - 216:14 246:19
SIZE [2] - 249:4, 252:14 STACK [1] - 255:6 SUGGEST [5] - 257:15, 257:21, 257:23,
SKIP [1] - 238:9 STAKES [1] - 176:7 258:2, 266:11
SLIGHT [1] - 163:1 STAND [10] - 159:4, 168:11, 169:24, SUGGESTED [2] - 256:12, 274:22
SLIM [1] - 158:8 177:3, 215:2, 263:21, 265:25, 268:25, SUGGESTING [1] - 261:1
SLOWLY [1] - 255:18 269:13 SUGGESTION [1] - 256:8
SMALL [2] - 163:9, 163:15 STAND-ALONE [1] - 263:21 SUGGESTIVE [1] - 194:24
SMOOTHLY [1] - 208:1 STANDARD [1] - 174:24 SUITE [1] - 242:13
SNAP [2] - 208:10, 210:9 STANDARD [1] - 179:19 SUMMARY [3] - 164:23, 168:18, 179:21
SNAPPING [1] - 210:8 STANDING [1] - 226:7 SUNDAY [3] - 273:6, 273:22, 277:7
SOFTWARE [26] - 177:23, 179:12, STANDS [1] - 181:7 SUPERIOR [2] - 182:3, 182:6
179:24, 179:25, 180:2, 180:8, 181:3, START [6] - 165:23, 171:17, 178:1, SUPPLEMENTAL [1] - 218:8
184:12, 190:3, 197:22, 197:23, 178:3, 210:5, 272:2 SUPPORT [4] - 159:23, 221:24, 266:12
197:24, 198:13, 198:15, 199:1, STARTED [5] - 169:15, 179:12, 214:6, SUPPORTS [2] - 242:24, 258:5
219:10, 270:19
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 143 of 145
296
SUPPOSED [1] - 276:2 TESTIMONY [13] - 160:11, 162:6, 166:9, TIMING [2] - 159:23, 273:9
SURPRISE [1] - 196:24 166:10, 167:14, 211:8, 212:6, 212:15, TITLE [9] - 226:24, 228:23, 228:25,
SURROUNDED [2] - 252:4, 252:6 248:1, 253:18, 260:23, 261:6, 265:5 229:2, 236:25, 237:18, 239:16,
SWITCH [5] - 208:23, 208:24, 209:5, TEXT [2] - 205:12, 228:25 239:25, 240:2
209:10, 241:16 THAT'D [1] - 162:3 TO [2] - 1:5, 1:9
SWITCH'S [1] - 209:3 THE [129] - 1:2, 1:4, 1:6, 1:7, 1:8, 1:10, TODAY [9] - 163:5, 163:6, 164:18,
SWITCHES [1] - 180:1 155:1, 155:10, 155:14, 155:17, 165:2, 169:9, 174:4, 176:9, 179:13,
SWORN [1] - 177:11 155:20, 157:2, 157:5, 159:7, 159:12, 184:23
SYNC [2] - 203:21, 204:4 159:14, 160:13, 160:21, 160:24, TOGETHER [6] - 203:21, 204:4, 205:13,
SYSTEM [7] - 181:22, 191:24, 193:1, 161:6, 161:11, 161:18, 162:19, 163:8, 218:15, 219:3, 226:8
195:10, 196:21, 227:19, 238:2 163:16, 164:6, 164:19, 165:4, 165:9, TOOK [4] - 159:20, 162:9, 197:6, 261:23
165:12, 165:17, 166:7, 166:16, TOOL [2] - 199:5, 199:6
T 166:21, 167:13, 167:24, 168:4, TOOLS [4] - 180:9, 181:1, 198:22,
168:10, 168:14, 168:23, 169:13, 221:25
TAB [2] - 192:16, 245:5 169:17, 169:23, 170:6, 173:17, TOP [11] - 190:14, 190:19, 194:9,
TABLET [6] - 204:3, 204:6, 204:11, 173:19, 175:4, 175:6, 176:14, 176:16, 194:22, 226:25, 228:14, 237:15,
204:15, 204:21, 205:16 176:18, 176:20, 176:22, 177:1, 177:4, 250:20, 250:21, 252:6
TAL [1] - 217:21 177:6, 177:16, 182:16, 183:5, 185:22, TOTALLY [3] - 181:17, 241:10, 253:15
TAL [1] - 155:14 194:11, 194:14, 202:4, 202:10, TOWER [42] - 161:21, 183:17, 206:14,
TALKS [1] - 172:14 202:19, 203:3, 203:5, 203:8, 211:18, 206:25, 207:4, 207:5, 207:22, 207:23,
TANNER [1] - 180:23 212:10, 213:9, 213:15, 213:20, 214:2, 207:24, 208:7, 208:8, 208:9, 208:10,
TATTLETALE [1] - 200:5 214:5, 214:17, 214:22, 215:4, 217:11, 208:16, 208:17, 208:21, 209:3, 209:4,
TAUGHT [2] - 180:13, 180:15 217:14, 217:16, 240:18, 250:5, 209:6, 209:8, 209:10, 209:17, 209:18,
TAX [1] - 236:1 253:11, 254:18, 254:20, 259:6, 209:19, 209:21, 209:23, 209:24,
TEACH [1] - 180:9 260:14, 260:18, 262:16, 262:25, 209:25, 210:3, 210:4, 210:8, 210:9,
TECH [2] - 239:16, 239:25 263:5, 263:12, 263:15, 263:24, 264:5, 210:22, 211:5, 211:7, 215:12, 216:6,
TECHNOLOGY [1] - 207:1 264:9, 264:14, 265:21, 266:15, 216:11, 216:20, 217:3
TECHNOLOGY [1] - 240:9 268:22, 269:2, 269:8, 269:11, 269:16, TOWER'S [2] - 208:11, 216:3
TEDLIN [2] - 186:21, 186:22 269:19, 269:23, 270:11, 270:13, TOWERS [16] - 207:10, 207:13, 207:16,
TELDRIN [34] - 162:16, 171:10, 218:14, 270:15, 270:18, 271:2, 271:5, 271:7, 207:19, 207:20, 208:4, 209:13, 210:6,
218:17, 218:22, 218:24, 219:2, 222:9, 271:21, 272:11, 272:20, 272:24, 210:25, 211:4, 211:12, 215:10,
224:9, 224:20, 228:12, 228:15, 273:10, 273:12, 273:18, 275:24, 215:19, 216:4, 216:10, 216:17
229:11, 230:7, 230:14, 235:15, 276:17, 277:4, 277:6, 277:13, 277:18 TRACE [1] - 189:1
236:17, 237:18, 238:1, 238:18, THEFT [5] - 179:7, 274:21, 275:1, TRACK [1] - 180:25
239:13, 240:10, 244:14, 245:6, 275:14, 275:16 TRACK [2] - 181:7, 215:18
251:24, 253:20, 258:1, 258:2, 266:19, THEMSELVES [1] - 223:4 TRACKING [1] - 207:1
267:5, 267:11, 274:5, 274:22 THEREAFTER [1] - 191:25 TRAFFIC [5] - 175:17, 175:19, 175:22,
TELDRIN [2] - 155:7, 155:17 THEREFORE [3] - 158:10, 214:24, 175:24, 181:2
TELDRIN23 [1] - 196:10 271:24 TRAINING [3] - 179:19, 179:22, 180:1
TELDRIN23@ICLOUD [3] - 196:24, THEY'VE [3] - 212:23, 220:18, 275:7 TRANSACTION [8] - 172:2, 172:7,
244:8, 244:18 THIRD [2] - 251:21, 268:4 172:14, 172:16, 172:17, 173:1, 173:4,
TELDRIN23@ICLOUD.COM [13] - THOMAS [20] - 187:22, 218:14, 218:24, 173:9
196:16, 200:12, 224:1, 235:8, 242:25, 219:3, 228:12, 230:13, 233:14, TRANSACTIONS [6] - 162:16, 162:17,
243:13, 244:1, 244:3, 244:11, 247:24, 233:24, 235:7, 235:15, 236:19, 171:15, 173:8, 174:10, 174:18
253:24, 254:7, 255:3 237:25, 238:18, 239:12, 240:10, TRANSCRIPT [5] - 1:3, 1:6, 1:8, 1:9,
TELDRIN_FOSTER@YAHOO [1] - 257:16, 257:21, 267:21, 274:10, 276:7 155:9
190:2 THOMAS'S [29] - 211:24, 218:1, 218:11, TRANSCRIPT [3] - 275:11, 276:4, 278:7
TELDRIN_FOSTER@YAHOO.COM [4] 219:6, 219:19, 221:2, 221:11, 222:6, TRANSCRIPTS [1] - 1:3
- 187:2, 190:9, 193:22, 223:24 222:15, 223:16, 224:10, 224:17, TREATS [1] - 192:25
TEN [4] - 202:21, 209:8, 212:2, 212:23 224:20, 225:7, 225:21, 228:21, 229:6,
TRIAL [1] - 155:9
TENDER [1] - 169:25 229:10, 229:25, 230:22, 231:4,
TRIAL [2] - 194:8, 250:9
TERMS [3] - 186:16, 187:1, 236:20 233:10, 235:14, 236:10, 237:20,
TRIAL [3] - 158:1, 212:5, 271:15
TEST [4] - 194:4, 275:20, 275:21, 239:5, 240:11, 267:21
TRIED [1] - 253:5
275:22 THREATENED [1] - 181:13
TRUE [5] - 197:14, 205:16, 266:14,
TESTIFIED [7] - 177:12, 212:7, 231:3, THREE [14] - 183:12, 211:12, 212:22,
275:23, 278:6
240:22, 246:14, 254:11, 267:16 214:21, 215:14, 216:25, 238:13,
TRUTH [2] - 157:15, 268:21
TESTIFY [6] - 174:12, 176:3, 212:3, 243:17, 245:18, 247:23, 253:5, 253:7,
TRY [6] - 202:20, 209:18, 216:17,
262:21, 262:22, 267:17 266:24
221:25, 236:16, 260:18
TESTIFYING [5] - 185:16, 212:1, THROUGHOUT [1] - 180:17
TRYING [10] - 159:17, 201:15, 243:25,
229:18, 233:24 TICKETS [1] - 221:24
244:2, 261:11, 261:14, 263:24,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 144 of 145
297
266:22, 273:19 225:20, 244:1, 244:24, 245:2, 254:25, 215:6, 221:10, 231:17, 232:1, 254:20,
TURN [2] - 182:19, 274:16 255:3 262:16, 264:18, 268:24, 269:23,
TURNED [2] - 170:20, 171:13 USERS [1] - 181:19 275:19, 275:24
TURNS [2] - 211:16, 277:7 WEBSTER'S [1] - 231:23
TWO [24] - 157:13, 160:10, 160:15, V WEDNESDAY [2] - 248:5, 250:14
161:24, 162:7, 163:23, 163:24, WEEDS [1] - 208:21
VALID [1] - 200:8
188:24, 192:21, 199:15, 200:18, WEEK [5] - 160:4, 213:2, 271:15,
VALIDATION [1] - 199:4
205:13, 207:17, 212:5, 223:16, 271:16, 272:1
VALUE [6] - 186:5, 186:7, 190:4,
232:12, 235:10, 235:17, 246:20, WEEKEND [5] - 272:9, 272:16, 276:21,
193:17, 268:8
254:25, 269:16, 269:21, 271:18, 277:15, 277:19
VARIOUS [3] - 207:9, 236:1, 238:15
275:23 WEEKS [2] - 212:5, 212:23
VENDORS [1] - 179:24
TYPE [5] - 205:20, 245:2, 245:3, 266:16, WELCOME [1] - 159:10
VENUE [1] - 229:21
267:25 WELLS [1] - 227:7
VERIFICATION [2] - 184:9, 186:4
TYPED [1] - 254:6 WHATSAPP [20] - 204:11, 204:15,
VERIFY [1] - 240:5
TYPES [3] - 183:12, 203:24, 206:16 204:19, 204:21, 205:1, 228:8, 228:10,
VERSION [1] - 232:5
TYPICALLY [1] - 247:19 228:11, 229:11, 230:6, 237:25,
VERSIONS [1] - 192:21
TYPING [1] - 236:20 238:19, 239:20, 239:21, 257:8,
VERSUS [1] - 271:18 257:12, 257:17, 257:21, 258:1, 274:11
VIA [6] - 184:20, 229:11, 237:25,
U 238:18, 257:11, 257:20
WHATSAPPED [1] - 240:10
WHISKEY [1] - 239:18
ULTIMATE [1] - 208:22 VICTIM [2] - 275:14, 275:15 WHITLEY [1] - 158:20
ULTIMATELY [2] - 274:5, 275:9 VIEW [2] - 258:14, 259:9 WHOLE [3] - 212:11, 213:13, 261:19
UNCLEAR [1] - 168:21 VIEWER [16] - 196:25, 197:3, 197:8, WI [1] - 204:24
UNDER [5] - 196:2, 246:9, 262:21, 198:20, 198:23, 244:19, 248:16,
WI-FI [1] - 204:24
262:22, 265:18 248:19, 248:21, 249:4, 249:6, 249:20,
WIFE [1] - 277:15
UNDERLYING [7] - 162:14, 162:20, 250:8, 251:6, 251:18, 252:10
WILL [1] - 1:4
162:22, 164:10, 168:18, 169:11, VOLUME [1] - 155:6
WILLIAMS [1] - 265:19
265:10 VS [1] - 155:5
WINDOWS [3] - 186:25, 189:12, 196:19
UNDERNEATH [1] - 263:1 VU [1] - 263:5
WISH [1] - 277:15
UNDERSTOOD [2] - 164:16, 255:10
WITH [1] - 1:10
UNDISCLOSED [2] - 211:22, 213:11 W WITHDRAW [2] - 158:7, 158:17
UNHAPPY [1] - 208:13
WA [1] - 239:21 WITHDRAWING [1] - 214:23
UNINVOLVED [1] - 234:4
WAIT [3] - 165:3, 188:12, 269:17 WITHDRAWN [1] - 215:5
UNIQUE [3] - 181:17, 205:24, 238:5
WANTS [1] - 207:3 WITNESS [6] - 159:12, 176:20, 177:6,
UNITED [2] - 180:18, 265:19
WASTE [1] - 214:15 177:16, 194:11, 194:14
UNITED [6] - 155:1, 155:4, 155:10,
WATCH [5] - 203:25, 204:9, 205:8, WITNESS [1] - 270:17
155:16, 155:25, 278:3
205:9, 205:10 WITNESS [25] - 156:2, 157:4, 157:6,
UNLIKE [1] - 213:1
WATCHES [1] - 222:22 159:3, 159:13, 160:11, 169:24,
UNREAD [4] - 187:16, 187:17, 193:21,
WATER [3] - 209:1, 216:14, 216:15 176:21, 177:1, 177:11, 181:23, 182:8,
194:19
WATERING [1] - 216:13 214:2, 214:4, 215:2, 261:25, 263:12,
UNTIMELY [1] - 166:11
WAYS [1] - 198:14 263:14, 268:25, 269:4, 269:13,
UP [39] - 157:23, 159:17, 168:23, 169:4,
WEB [2] - 241:10, 256:20 270:20, 273:14
169:9, 180:24, 182:2, 189:20, 190:4,
WEBSITE [3] - 244:9, 244:15, 244:21 WITNESSES [3] - 176:24, 270:20,
193:9, 193:11, 193:12, 194:7, 195:10,
WEBSITES [1] - 257:1 270:23
196:13, 200:5, 205:20, 209:25, 211:3,
WEBSTER [64] - 155:18, 161:14, WONDERING [1] - 277:1
214:15, 214:24, 218:18, 239:21,
176:25, 177:2, 177:18, 182:11, WORD [1] - 211:24
240:7, 240:12, 245:5, 245:25, 246:7,
182:17, 183:1, 183:6, 183:7, 185:18, WORD [3] - 203:18, 232:4, 259:24
253:12, 260:16, 261:23, 263:25,
185:23, 185:24, 188:11, 188:14, WORKS [6] - 161:22, 184:2, 204:13,
264:4, 265:11, 266:6, 266:10, 276:6,
188:16, 194:7, 194:12, 194:15, 222:22, 223:10, 268:11
277:10
195:24, 196:1, 196:13, 196:14, 202:8, WORLDWIDE [1] - 181:20
UPDATE [3] - 164:3, 164:5, 249:10
202:11, 202:17, 203:9, 203:10, 212:4, WORTHY [1] - 227:15
UPDATED [2] - 162:24, 164:12
212:12, 213:6, 214:20, 215:7, 215:8, WRAP [1] - 214:14
UPDATES [3] - 196:20, 207:18
217:10, 217:12, 250:3, 254:22, 259:5, WRITE [4] - 177:23, 185:5, 198:2,
US'S [1] - 272:12
259:7, 260:12, 260:15, 260:22, 213:12
USAGE [1] - 181:2
261:19, 262:8, 262:11, 262:17, WRITES [1] - 240:24
USER [9] - 192:14, 201:8, 209:10,
264:12, 264:21, 265:24, 269:1, WRITING [1] - 180:19
242:24, 243:10, 244:14, 246:21,
269:14, 269:21, 269:24, 270:10, WRITTEN [2] - 197:25, 213:7
247:10
271:1, 271:4, 271:6, 272:15, 272:23, WROTE [1] - 171:10
USERNAME [13] - 187:9, 192:23, 201:9,
273:11, 273:16, 273:25, 276:1 WWW.ADOBE.COM [1] - 242:12
201:16, 218:19, 218:21, 218:25,
WEBSTER [14] - 202:4, 214:13, 214:18,
Case 1:20-cr-00296-JPB-CMS Document 1028 Filed 06/14/24 Page 145 of 145
298
WWW.ICLOUD.COM [1] - 244:4
Y
Y'ALL [12] - 157:6, 168:14, 170:6, 203:5,
214:5, 215:4, 269:17, 269:19, 272:11,
273:1, 273:21, 277:18
YAHOO [23] - 186:21, 190:22, 190:24,
192:2, 192:12, 196:3, 197:12, 218:18,
224:10, 224:16, 224:20, 226:21,
227:11, 227:14, 227:16, 240:22,
247:3, 247:8, 247:11, 256:21, 256:25,
260:9
YEARS [2] - 162:7, 198:1
YESTERDAY [2] - 166:13, 274:2
YORK [1] - 182:2
YOU [2] - 1:5, 1:8
Z
ZEROS [1] - 180:11
ZONE [6] - 162:10, 162:23, 162:25,
163:1, 164:12, 174:21
ZONE [9] - 162:11, 162:12, 163:7,
164:4, 174:25, 175:9, 175:10, 175:12
ZONES [3] - 167:7, 167:8, 175:14
File and source
- File
- gov.uscourts.gand.292223.1028.0.pdf
- Size
- 1,147,586 bytes
- SHA-256
- d206da19a0b54205bd97d69999fc6b51d718ed7e2b7c75e842dd78e0a4ab3ae6
- Original
- PACER (login required)