EFTA00247131

ISDNY Rcs 01/17 
:itch and Scrture Warrant 
UNITED STATES DISTRICT COURT 
for the 
Southern District of New York 
In the Matter of the Search of 
tarn* describe die property to be searched 
or identify the person by name and address) 
See Attachment A 
Case No. 
SEARCH AND SEIZURE WARRANT 
To: 
Any authorized law enforcement officer 
An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the 
Southern 
 District of 
 
New York_ 
lidentifi• the person or describe the property• to be searched and give its location): 
See Attachment A 
The person or property to be searched, described above, is believed to conceal (identib the person or describe the property 
io be seized,: 
See Attachment A 
the search and seizure are related to violation(s) of (Insert statutory Cit011OILV 
Title 18, United States Code, Sections 371 and 1591 
I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or 
property. 
YOU ARE COMMANDED to execute this warrant on or before 
(not to exceed 14 daYs) 
O in the daytime 6:00 a.m. to l0 p.m. 
al  at any time in the day or night as I find reasonable cause has been 
established. 
Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises. the property was taken, or leave the copy and receipt at the 
place where the property was taken. 
The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an 
inventory as required by law and promptly return this warrant and inventory to the Clerk of the Court. 
O Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court. 
(SW Initials 
July 7, 2019 
O I find that immediate notification may have an adverse result listed in IS U.S.C. § 2705 (except for delay 
of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be 
searched or seized (check the appropriate box) Ofor  
days (not to exceed 30). 
Ountil. the facts justifyi 
later specific date o 
Date and time issued: 1  - 
rkota4k . 
Judge's signature 
City and state: 
New York, NY 
 
Hon. Barbara Moses. U.S. Magistrate Judge 
Printed name and title 
EFTA00247191

AO93 (SDNY Rev. OM 7)Search and Seizure Warrant (Page 2) 
Return 
Case No.: 
Date and time warrant executed: 
Copy of wan-ant and inventory left with: 
Inventory made in the presence of: 
Inventory of the property taken and name of any person(s) seized: 
Certification 
I declare under penalty 
to the Court. 
Date: 
of perjury that this inventory is correct and was returned along with the original warrant 
Executing officer's signature 
Printed name and title 
EFTA00247192

ATTACHMENT A 
I. Premises to be Searched—Subject Premises 
The premises to be searched (the "Subject Premises") are described as a multi-story 
single-family residence located at 9 East 71st Street, New York, New York, and include all locked 
and closed containers found therein. A photograph of the front entrance to the Subject Premises 
is included below: 
II. Items to Be Seized 
A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 
This warrant authorizes the seizure of certain evidence, fruits, and instrumentalities of 
violations of Title IS, United States Code, Sections 1591 (sex trafficking of minors) and 371 
(sex trafficking conspiracy) (the "Subject Offenses") described as follows: 
i. Any and all taxidermied dogs. 
ii. Any and all massage tables and massage paraphernalia. 
iii. Any and all busts or three-dimensional representations of female human 
torsos. 
iv. Any and all photos or representations depicting nude or partially nude 
women located in the Massage Room, as defined herein. 
v. Any and all sex toys and sex paraphernalia located in the Massage 
Room, as defined herein. 
1017.03.02 
EFTA00247193

vi. A binder labeled "PB Girls" and any other documents or 
communications with or regarding victims or potential victims of the 
Subject Offenses. 
2 
2017.0E.02 
EFTA00247194

EXHIBIT D 
2017.08.02 
EFTA00247195

AO 93 (SDNY Rev. 01/17) Search and Seizure Warrant 
UNITED STATES DISTRICT COURT 
for the 
Southern District of New York 
En the Matter of the Search of 
(Briefly describe the property to be searched 
or identin the person by name and address) 
See Attachment A 
Case No. 
SEARCH AND SEIZURE WARRANT 
To: 
Any authorized law enforcement officer 
An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the  
Southern 
 District of  
New York 
(identify the person or describe the property to be searched and give its location): 
See Attachment A 
The person or property to be searched, described above, is believed to conceal (Meng, the person or describe the property 
to be seized): 
See Attachment A 
The search and seizure are related to violation(s) of (insert statutory citations): 
Title 18, United States Code, Sections 371 and 1591 
I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or 
property. 
YOU ARE COMMANDED to execute this warrant on or before 
(not to exceed 14 days) 
O in the daytime 6:00 a.m. to 10 p.m. 
a at any time in the day or night as I find reasonable cause has been 
established. 
Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the 
place where the property was taken. 
The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an 
inventory as required by law and promptly return this warrant and inventory to the Clerk of the Court. 
O Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court. 
IJSAL1 Initials 
July 21, 2019 
O I find that immediate notification may have an adverse result listed in 18 U.S.C. § 2705 (except for delay 
of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be 
searched or seized (check the appropriate bar) O for  
days (not to exceed 30). 
Ountil, the facts justifying, the later specific date of  
•-• 
Date and time issued: 1-4 -Ick 11`-n?-1,A • 
Ju 
signature 
City and state: 
New York, NY 
Hon. Barbara Moses, U.S. Magistrate Judge 
Printed name and title 
EFTA00247196

AC) 93 (SONY Rev. 01/17) Search and Seizure Warrani (Page 2) 
Return 
Case No.: 
Date and time warrant executed: 
Copy of warrant and inventory left with: 
Inventory made in the presence of: 
Inventory of the property taken and name of any person(s) seized: 
Certification 
I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court. 
Date: 
Executing officer's signature 
Printed name and title 
. 
EFTA00247197

ATTACHMENT A 
I. The Subject Devices to Be Searched 
The Subject Devices are particularly described as compact discs stored in containers 
marked with FBI evidence numbers 15, 16, 17, 18, and 22, seized from the residence located at 9 
East 71st Street, New York, New York, on or about July 7, 2019. 
II. Items to Be Seized 
A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 
This warrant authorizes the seizure of certain evidence, fruits, and instrumentalities of 
violations of Title 18, United States Code, Sections 1591 (sex trafficking of minors), and 371 (sex 
trafficking conspiracy) (the "Subject Offenses") described as follows: 
1. 
Any documents or communications with or regarding victims or potential victims 
of the Subject Offenses; 
2. 
Any photographs of victims or potential victims of the Subject Offenses; 
3. 
Any nude, partially nude, or sexually suggestive photographs of individuals who 
appear to be teenage girls, or younger;1,
4. 
Motion pictures, films, videos, and other recordings of visual or written depictions 
of minors engaged in sexually explicit conduct, as defined in 18 U.S.C. § 2256(2); 
5. 
Records or other items that evidence ownership, control, or use of, or access to 
devices, storage media, and related electronic equipment used to access, transmit, or store 
information relating to the Subject Offenses, including, but not limited to, sales receipts, 
warranties, bills for Internet access, handwritten notes, registry entries, configuration files, saved 
usemames and passwords, user profiles, e-mail contacts, and photographs; 
6. 
Any child erotica, defined as suggestive visual depictions of nude minors that do 
not constitute child pornography as defined by 18 U.S.C. § 2256(8). 
B. Review of ESI 
Law enforcement personnel (including, in addition to law enforcement officers and agents, 
and depending on the nature of the ESI and the status of the investigation and related proceedings, 
attorneys for the government, attorney support staff, agency personnel assisting the government in 
this investigation, and outside technical experts under government control) will create a forensic 
image of the Subject Devices (if practicable) and review the ESI contained therein for information 
responsive to the warrant. 
In conducting this review, law enforcement personnel may use various techniques to 
determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such 
techniques may include, for example: 
2017.08.02 
EFTA00247198

• 
surveying directories or folders and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 
• 
conducting a file-by-file review by "opening" or reading the first few "pages" of such 
files in order to determine their precise contents (analogous to performing a cursory 
examination of each document in a file cabinet to determine its relevance); 
• "scanning" storage areas to discover and possibly recover recently deleted data or 
deliberately hidden files; and 
• 
performing electronic keyword searches through all electronic storage areas to 
determine the existence and location of data potentially related to the subject matter of 
the investigation6; and 
• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Section 
II.A of this Attachment. However, law enforcement personnel are authorized to conduct a 
complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 
6 Keyword searches alone are typically inadequate to detect all relevant data. For one thing, 
keyword searches work only for text data, yet many types of files, such as images and videos, do. 
not store data as searchable ten Moreover, even as to text data, there may be information properly 
subject to seizure but that is not captured by a keyword search because the information does not 
contain the keywords being searched. 
2 
2017.08.02 
EFTA00247199

EXHIBIT E 
2017.08.02 
EFTA00247200

• 
r 
r
.
AO 93 (SDNY Rev. 01/17) Search end Seizure Warrant 
UNITED STATES DISTRICT COURT 
In the Matter of the Search of 
for the 
Southern District of New York 1 9 MAG 6 4 a 9 
(Briefly describe the property to be searched 
or gent& the person by name and address) 
See Attachment A 
Case No. 
19 Cr. 490 (RMB) 
SEARCH AND SEIZURE WARRANT 
To: 
Any authorized law enforcement officer 
An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the  
Southern 
 District of  
flew York 
(ldent& the person or describe the property to be searched and give its location): 
See Attachment A 
The person or property to be searched, described above, is believerlto conceal °dent& the person or describe the property 
to be seirecp: 
See Attachment A 
The search and seizure are related to violation(s) of (insert statutory citations): 
Title 18, United States Code, Sections 371 and 1591 
I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or 
property. 
YOU ARE COMMANDED to execute this warrant on or before 
 
Jury 12, 2019 
(not to exceed 14 dens) 
in the daytime 6:00 a.m. to 10 p.m. 
at any time in the day or night as I find reasonable cause has been 
k 
established. 
Unless delayed notice is authorized below, you• must give a copy-of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the 
place where the property was taken. 
The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an 
inventory as required by law and promptly return this warrant and inventory to the Clerk of the Court.
0 Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court. 
Uniarrtia4 
O I fmd that immediate notification may have an adverse result listed in 18 1/,$)Cr § 2705 (except for delay 
of trial), and authorize the officer executing this warrant to delay notice to thcpeivnlio, pc :..,hose property, will be 
searched or seized (Check the appropriate box) D for 
days (not to exce00).$ • / ' ; 
°until, the facts justifying, tkielatei•sPecific date of 
 
Date and time issued: 
City and state: 
New York, NY 
Hon. Hen& i?firean; Uc9.,'Iv?t.cjistrate Judge 
EFTA00247201

AO 93 (SONY Rev. 01/17) Search and Seizure Warrant (Page 2) 
Return 
Case No.: 
Date and time warrant executed: 
Copy' f warrant and inventory left with: 
Inventory made in the presence of : 
Inventory of the property taken and name of any person(s) seized: 
. 
. 
• 
J 
• 
Certification 
I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court. 
Date: 
, 
&tasting officer's signature 
Printed name and tide 
i 
EFTA00247202

ATTACHMENT A 
I. Premises to be Searched—Subject Premises 
I. 
The premises to be searched (the "Subject Premises") are described as a multi-story 
single-family residence located at 9 East 7Ist Street, New York, New York, and include all locked 
and closed containers found therein. A photograph of the front enhance to the Subject Premises 
is included below: 
11. Items to Be Seized 
A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 
This warrant authorizes the seizure of certain evidence, fruits, and instrumentalities of 
violations of Title 18, United States Code, Sections 1591 (sex trafficking of minors), and 371 (sex 
trafficking conspiracy) (the "Subject Offenses") described as follows: 
The items to be seized from the Subject Premises are any computer devices and storage 
media that may contain any electronically stored information falling within the categories set forth 
in Section B of this Attachment, including, but not limited to, desktop and laptop computers, disk 
drives, modems, thumb drives, personal digital assistants, smart phones, digital cameras, scanners, 
routers, modems, and network equipment used to connect to the Internet. In lieu of seizing any 
such computer devices or storage media, this warrant also authorizes, in the alternative, the 
copying of such devices or media for later review. 
The items to be seized from the Subject Premises also include: 
2017.08.02 
EFTA00247203

1. 
Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media, including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 
2. 
Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 
3. 
Any evidence concerning the identities or locations of those persons with access to, 
control over, or ownership of the seized or copied computer devices or storage media. 
B. Search and Seizure of Electronically Stored Information 
As set forth in Section A to this attachment, this warrant authorizes the search of the Subject 
Premises for any computer devices and storage media that may contain any electronically stored 
information falling within the categories set forth below: 
4. 
Any documents or communications with or regarding victims or potential victims 
of the Subject Offenses; 
5. 
Any photographs of victims or potential victims of the Subject Offenses; 
6. 
Any nude, partially nude, or sexually suggestive photographs of individuals who 
appear to be teenage girls, or younger; 
7. 
Records or other items that evidence ownership, control, or use of; or access to 
devices, storage media, and related electronic equipment used to access, transmit, or store 
information relating to the Subject Offenses, including, but not limited to, sales receipts, 
warranties, bills for Internet access, handwritten notes, registry entries, configuration files, saved 
usernames and passwords, user profiles,-e-mail contacts, and photographs; 
8. 
Any child erotica, defined as suggestive visual depictions of nude minors that do 
not constitute child pornography as defined by 18 U.S.C. § 2256(8). 
C. Review of ESI 
Law enforcement personnel (including, in addition to law enforcement officers and agents, 
and depending on the nature of the ESI and the status of the investigation and related proceedings, 
attorneys for the government, attorney support staff, agency personnel assisting the government in 
this investigation, and outside technical experts under government control) will create a forensic 
image of the Subject Devices (if practicable) and review the ESI contained therein for information 
responsive to the warrant, that is, for the materials specified in Section B of this Attachment. 
In conducting this review, law enforcement personnel may use various techniques to 
determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such 
techniques may include, for example: 
2 
2017.08.02 
EFTA00247204

• 
surveying directories or folders and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 
• conducting a file:by-file review by "opening" or reading the first few "pages" of such 
files in order to determine their precise contents (analogous to performing a cursory 
examination of each document in a file cabinet to determine its relevance); 
• "scanning" storage areas to discover and possibly recover recently deleted data or 
deliberately hidden files; and 
• performing electronic keyword searches through all electronic storage areas to 
determine the existence and location of data potentially related to the subject matter of 
the investigation6; and 
• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
• . 
Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Section 
ILA of this Attachment. However, law enforcement personnel are authorized to conduct a 
complete review of all the EST from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant 
6 Keyword searches alone are typically inadequate to detect all relevant data. For one thing, 
keyword searches work only for text data, yet many types: of files, such' as images and videos, do 
not store data as searchable text. Moreover, even as to text data, there may be information properly 
subject to seizure but that is not captured by a keyword search because the information does not 
contain the keywords being searched. 
3 
2017.08.02 
EFTA00247205

EXHIBIT F 
2017.08.02 
EFTA00247206

J 
• 
AO 93 (S13NY Act 01/17) Stara and Want Warrant 
• 
UNI.I.ED STATES DISTRICT COURT 
for the 
Southern Dktrict of New York 
pliOLOI•led CMS Stit•Ci 
oe meet 
,t, seek 
pul 
Wit smIkare; A.4 0O4 Cht se2,4 SEARCH AND SETiIIRE WARRANT 
it-a. flo
fivo 61. 
it iVerinjyA: glee j and itop6iitarrs os• k ce.s.ki 2,0frame.. 
To: 
Anir
orined law enforcement officer 
'1/TAG 6581 
In the Matter ofithe Search of 
) 
(Briefly deem& the property to be:earthed 
) 
or dent* the person byname ant I rectelayse) 
A 1./or( r Now. w ita. 1..mcs No zst to to irnt.-46), 
$'ef..Attach 
./ 
Alb, in 'Pa a 
Subtitle. O tuts te 3 
19J)42tAd rhe 
) 
qv ne IMIlit 
Fest Per : no,. iirkrcirkets 6.4th CbSjeilee, frwsri- biatt44+0 s.e
An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the  
Southern 
 District of  
New York 
(?dandily the person or describe the properly to be strathed and give ter location): 
See Attachment A 
The person or property to be searched, described above, is believed to conceal Went* the person or describe the properly 
to be setrecp: 
See Attachment A 
The search and seizure are related to violation(s) of (mseri statutory dtations): 
I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or 
property. 
YOU ARE COMMANDED to 
TA? 21 1 160 
this warrant on or before 
(not to exceed14 
has 
*hi the daytime 6:06 am. to io p.m. 
at any time in the day or night as I find reasonable cause 
 been 
established. 
Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the 
place where the property was taken. 
The officer executing this warrant, or an officer present dining the execution of the warrant, must prepare an 
• inventory as required by law and promptly return this warrant and inventory to titsCleSof lite Court 
1 Upon its return, this warrant and inventory should be filed under seal by? t (Id of thbcourt  iNc
, . 
• 
find that immediate notification may have an adverse result listot 
S.d,.§ 2705 gizcot..k.t for delay 
of trial), and authorize the officer executing this warrant to delay noticeg th.4erson.lifs,Oosmvirsip property, will be 
searched or seized (check the appropriate 
r  
30 
 days (not  icre-eetl'0). 
,•! 
Ountil„ the facts justifying, tiie litOfspecifk ,chic of:  
6): 3s
-JUL 1 5 2019 
-
Date and time issued: 
City and state: 
New York, NY 
•.4 
ntnn 
vrivgfit 
_fa r,,Y 
:;t!PIM5VAIO:N50401ickfox
• unitsnRAStmlistv 4i1(7: 
Southern District of New York. 
EFTA00247207

• 
AO 93 (SDNY Rev. 01M) Search and Seizure Waist (No 2) 
Return 
Case No.: 
Date and time warrant executed: 
Copy of warrant and inventory leR with: 
Inventory made in the presence of : 
Inventory of the property taken and name of any person(s) seized: 
• 
• 
Certification 
I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court 
• 
• 
Date:. . 
, 
 
- 
Perot, officer': "%what 
. 
' Prbgaincore and Me 
EFTA00247208

Attachment A 
I. Items Subject to Search and Seizure 
. 
The Subject Items are particularly described as follows': 
• 
A black iPhone with. NEI number 357201093322785, which was seized from 
. 
JEFFREY EPSTEIN on or about July 6, 2019 ("Subject Item-1"). 
• A silver iPad with serial number DLXQGM3KOlvfW3, which was seized from 
JEFFREY EPSTEIN on or about July 6, 2019 ("Subject Item-2"). 
• 
Two black binders with CDs, which were seive/rom a blue suitcas 
July 11, 2019 ("Subject Item-3"). 
/hi) Sett') 0,( 
• 
Two black bard drives, which were seized rom a blue suitcase 
2019 ("Subject Item-4"). 
bit
il'eC 4..1 Ar•E 
• A box of CDs, which was seized from a b ue suitcase on or ... T 
("Subject Item-5"). 
r._ 
It(\ Seci,4,1 Al 
• 'Two binders with various CDs, whiaa were seized! \from 
July 11, 2019 ("Subject Item-6"). 
. 
IC Review of ESI on the Subject Items 
Law enforcement personnel (who may include, in addition to law enforcement officers and 
agents, attorneys for the government, attorney support staft agency personnel assisting the 
government in this investigation, and outside technical experts under government control) are 
authorized to review the ESI contained on the Subject Items for evidence, fruits, and 
instrumentalities of violations of Title .18, United States Code, Sections 1591 (sex trafficking of 
minors), and 371 (sex trafficking conspiracy) (the "Subject Offenses") described as follows: 
1. 
Any documents or communications with or regarding victims or potential victims 
of the Subject Offenses; 
2. 
Any photographs of victims or potential victims of the Subject Offenses; 
3. ' 
• Any nude, partially nude, or sexually suggestive photographs of individuals who 
appear to be teenage girls, or younger, 
4. 
Records, data, or other items that evidence ownership, control, or use oZ or ace eqc 
to the Subject Items, including, but not limited to Racer history data, historical location data, 
To the extent that the Subject Items contain any sib cards or other removable storage media, the 
description of each such item encompasses those SD cards and other media. 
2017.08.02 ' 
EFTA00247209

configuration files, saved usemames and passwords, user profiles, e-mail contacts, and 
photographs; 
5. 
Any child erotica, defined as suggestive visual depictions of nude minors that do 
not constitute child pomograpb.y as defined by 18 U.S.C. § 2256(8). 
As to Subject Item-1 and Subject Item-2, Law enforcement personnel (who may include, 
in addition to law enforcement officers and agents, attorneys for the government, attorney support 
staff, agency personnel assisting the government inthis investigation, and outside technical experts 
under government control) are further authorized to review the ESI contained on Subject Item-1 
and • Subject Item-2 for evidence, fruits, and instrumentalities of violations of Title 18, United 
States Code, Sections 1591 (sex trafficking of minors), and 371 (sex trafficking conspiracy) (the 
"Subject Offences.") described as follows: 
1. 
Any documents or communications with or regarding co-conspirators in the Subject 
Offenses. 
In conducting this review, law enforcement personnel may use various techniques to 
• determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such • 
techniques may include, for example:.
• • surveying directories or folders and the individual files they 'contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 
• conducting a file-by-file review by "opening" or reading the first few "pages" of such 
files in order to determine their precise contents (analogous to performing a cursory 
examination of each document in a file cabinet to determine its relevance); 
• "scanning" storage areas to discover and possibly recover recently deleted data or 
deliberately hidden files; and 
• performing electronic keyword searches through all electronic storage areas to 
determine the existence and location of data potentially related to the subject matter of 
the investigation; and 
• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Section II 
of this Attachment. However, law enforcement personnel are authorized to conduct a complete 
review of all the ESI from seized devices or storage media if necessary to evaluate its contents and 
to locate all dataresponsive to the warrant. 
2 
2017.08.02 
EFTA00247210