EFTA01065106.pdf

• Menu o Overview o Device Details ■ NYC024364.dmg (Evidence ID: NYC024364.dmg - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Notes ■ Top Contacts ■ User Accounts Case Data: Calendar Items (101-200 of 2000) Date Duration Summary Location Time Zone Calendar URL 2013-01-02 [1] 00:00:00 1 day birtday (UTC) 2013-01-02 [2] 00:00:00 1 day ■ birtday (UTC) 2013-01-02 [3] 00:00:00 1 day birtday (UTC) 2013-01-02 [4] 00:00:00 1 day birtday (UTC) 2013-01-02 [5] 00:00:00 1 day birtday (UTC) 2013-01-03 [6] 00:00:00 1 day Alarm notification (UTC) 2013-01-06 [7] 00:00:00 1 day Alarm notification (UTC) 2013-01-07 [8] 00:00:00 1 day Alarm notification (UTC) 2013-01-07 [9] 00:00:00 1 day Alarm notification (UTC) 2013-01-07 [10] 00:00:00 I day Alarm notification (UTC) 2013-01-08 [11] 00:00:00 1 day Alarm notification (UTC) EFTA01065106  2013-01-09 [12] 00:00:00 I day Alarm notification (UTC) 2013-01-09 [13] 00:00:00 1 day Alarm notification (UTC) 2013-01-10 [14] 00:00:00 1 day Alarm notification (UTC) 2013-01-10 [15] 00:00:00 1 day Alarm notification (UTC) 2013-01-11 [16] 00:00:00 1 day Alarm notification (UTC) 2013-01-11 [17] 00:00:00 1 day Alarm notification (UTC) 2013-01-12 [18] 00:00:00 1 day Alarm notification Ny (UTC) 2013-01-12 [19] 00:00:00 1 day Alarm notification (UTC) 2013-01-13 [20] 00:00:00 1 day Alarm notification (UTC) 2013-01-14 [21] 00:00:00 1 day Alarm notification (UTC) 2013-01-15 Dial-in: - Passco US Mountain [22] 09:00:00 1 hour Call re Kovel letter de: - Security co Standard (UTC) de: 4747 Time 2013-01-15 Dial-in: - Passco [23] 16:00:00 1 hour Call it Kovel letter de: - Security co (UTC) de: 4747 Dial-in: Intern 2013-01-16 Call with forensic US Mountain tional: - Pass [24] 08:00:00 1 hour accountants re Holt Standard code: - Security (UTC) erbosch Time code: 5656 Dial-in: - Intern 2013-01-16 Call with forensic tional: - Pass [25] 15:00:00 1 hour accountants re Holt code: - Security (UTC) erbosch code: 5656 2013-01-17 [26] 00:00:00 1 day Alarm notification (UTC) 2013-01-18 [27] 00:00:00 1 day Alarm notification (UTC) EFTA01065107  2013-01-23 [28] 00:00:00 I day Alarm notification (UTC) 2013-01-24 [29] 00:00:00 1 day Alarm notification (UTC) 2013-01-24 [30] 00:00:00 1 day Alarm notification (UTC) 2013-01-29 [31] 00:00:00 1 day Alarm notification (UTC) 2013-02-09 [2] 00:00:00 1 day kossyn bach (UTC) 2013-02-09 [3] 00:00:00 1 day kossyn bach (UTC) 2013-02-09 [1] 00:00:00 1 day kossyn bach (UTC) 2013-02-09 [32] 00:00:00 1 day kossyn bach (UTC) 2013-02-09 [4] 00:00:00 1 day kossyn bach (UTC) 2013-02-10 [3] 00:00:00 1 day barnaby (UTC) 2013-02-10 [4] 00:00:00 1 day barnaby (UTC) 2013-02-10 [33] 00:00:00 1 day barnaby (UTC) 2013-02-10 [1] 00:00:00 1 day barnaby (UTC) 2013-02-10 [2] 00:00:00 1 day barnaby (UTC) 2013-02-14 [4] 00:00:00 1 day El (UTC) 2013-02-14 [2] 00:00:00 1 day (UTC) [2] 2013-02-14 1 day yfke 00:00:00 EFTA01065108  (UTC) 2013-02-14 [2] 00:00:00 1 day I= (UTC) 2013-02-14 [3] 00:00:00 1 day hair, (UTC) 2013-02-14 [3] 00:00:00 1 day - (UTC) 2013-02-14 [34] 00:00:00 1 day yfke (UTC) 2013-02-14 [2] 00:00:00 1 day ian (UTC) 2013-02-14 [35] 00:00:00 1 day MI (UTC) 2013-02-14 [2] 00:00:00 1 day hair, (UTC) 2013-02-14 [3] 00:00:00 1 day yfke (UTC) 2013-02-14 [1] 00:00:00 1 day ian (UTC) 2013-02-14 [4] 00:00:00 1 day yfke (UTC) 2013-02-14 [1] 00:00:00 1 day hair, (UTC) 2013-02-14 [4] 00:00:00 1 day ian (UTC) 2013-02-14 [3] 00:00:00 1 day ian (UTC) 2013-02-14 [3] 00:00:00 1 day MI (UTC) 2013-02-14 [4] 00:00:00 1 day I= (UTC) 2013-02-14 [1] 00:00:00 1 day yfke (UTC) EFTA01065109  2013-02-14 [4] 00:00:00 I day hair, (UTC) 2013-02-14 [1] 00:00:00 1 day (UTC) 2013-02-14 [1] 00:00:00 1 day (UTC) 2013-02-14 [36] 00:00:00 1 day ian (UTC) 2013-02-14 [37] 00:00:00 1 day hair, (UTC) 2013-02-14 [38] 00:00:00 1 day (UTC) 2013-02-15 [1] 00:00:00 1 day axel (UTC) 2013-02-15 [39] 00:00:00 1 day ehud. larry, (UTC) 2013-02-15 [4] 00:00:00 1 day sexton (UTC) 2013-02-15 [40] 00:00:00 1 day sexton (UTC) 2013-02-15 [3] 00:00:00 1 day ehud. larry, (UTC) 2013-02-15 [4] 00:00:00 1 day eileen (UTC) 2013-02-15 [2] 00:00:00 1 day jes washington (UTC) 2013-02-15 [41] 00:00:00 1 day eileen (UTC) 2013-02-15 [4] 00:00:00 1 day jes washington (UTC) 2013-02-15 [1] 00:00:00 1 day sexton (UTC) [2] 2013-02-15 1 day eileen 00:00:00 EFTA01065110  (UTC) 2013-02-15 [1] 00:00:00 1 day ehud. larry, (UTC) 2013-02-15 [3] 00:00:00 1 day sexton (UTC) 2013-02-15 [4] 00:00:00 1 day axel (UTC) 2013-02-15 [1] 00:00:00 1 day jes washington (UTC) 2013-02-15 [1] 00:00:00 1 day eileen (UTC) 2013-02-15 [2] 00:00:00 1 day ehud. larry, (UTC) 2013-02-15 [4] 00:00:00 1 day ehud. larry, (UTC) 2013-02-15 [42] 00:00:00 1 day jes washington (UTC) 2013-02-15 [3] 00:00:00 1 day jes washington (UTC) 2013-02-15 [2] 00:00:00 1 day sexton (UTC) 2013-02-15 [2] 00:00:00 1 day axel (UTC) 2013-02-15 [3] 00:00:00 1 day eileen (UTC) 2013-02-15 [3] 00:00:00 1 day axel (UTC) 2013-02-15 [43] 00:00:00 1 day axel (UTC) 2013-02-16 [1] 00:00:00 1 day reid brekfast (UTC) 2013-02-16 [2] 00:00:00 1 day reid brekfast (UTC) EFTA01065111  2013-02-16 [3] 00:00:00 I day reid brekfast (UTC) 2013-02-16 [44] 00:00:00 1 day reid brekfast (UTC) 2013-02-16 [4] 00:00:00 1 day woody, palm beach (UTC) 2013-02-16 [4] 00:00:00 1 day reid brekfast (UTC) 2013-02-16 [2] 00:00:00 1 day woody, palm beach (UTC) 2013-02-16 [45] 00:00:00 1 day woody, palm beach (UTC) 2013-02-16 [1] 00:00:00 1 day woody, palm beach (UTC) Notes [1] Source NYCO24364.dmg/Macintosh HD Device [1] /Users/Stoty/Library/Mail/V3/IMAP-jeevacation®imap.gmail.cotn/[Gmail].mbox/All Mail.mbox/E5 Source 84A8D1-AC8E-474D-AC32-CFA8E4A73FEC/Data/0/3/1/Attachments/130215/3/Home.ics File [2] Source NYCO24364.dmg/Macintosh HD Device [2] Source /Users/Stoty/Downloads/Home.ics File [3] Source NYCO24364.dmg/Macintosh HD Device [3] /Users/Stoty/Library/Mail/V3/IMAP-jeevacation®imap.gmail.corn/[Gmail].mbox/All Mail.mbox/E5 Source 84A8D1-AC8E-474D-AC32-CFA8E4A73FEC/Data/1/6/1/Attachments/161628/3/Home.ics File [4] Source NYCO24364.dmg/Macintosh HD Device [4] Source /Users/Stoty/Downloads/Home(1).ics File [5] Source NYCO24364.dmg/Macintosh HD Device EFTA01065112 [5] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/AAF370EC-44CD-40A3-A997-4C3BD565AD File 11.ics [6] Source NYCO24364.dmg/Macintosh HD Device [6] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/A310603 E-137C-419E-ACC8-510023AB9402. File ics [7] Source NYCO24364.dmg/Macintosh HD Device [7] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/M6B6E62-9AAF-46BC-88BE-FA4B9A786F6 File 6.ics [8] Source NYCO24364.dmg/Macintosh HD Device [8] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/A3ECA4D I -2C5B-46BA-A770-D I 3F5I28BA File F I .ics [9] Source NYCO24364.dmg/Macintosh HD Device [9] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/F89F2ECO-6FE7-4439-81F7-4D69B025ABD5. File ics [10] Source NYCO24364.dmg/Macintosh HD Device [10] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/1054171C-D266-4B82-A67A-1814DB614309.i File cs [11] Source NYCO24364.dmg/Macintosh HD Device [11] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/D422F4A9-E92E-4582-A4B7-DF5EEE8AA8B File 9.ics [12] Source NYCO24364.dmg/Macintosh HD Device [12] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/B27966EC-56E2-4607-966A-D878A397E378.i File cs [13] Source NYCO24364.dmg/Macintosh HD Device [13] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/79AF19F1-1B08-4037-BAF2-15F0589EB789.i EFTA01065113 File cs [14] Source NYCO24364.dmg/Macintosh HD Device [14] /Users/Stmy/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/2DOCBD4A-B912-4EB4-BD1B-F5D2BA4AF File D3A.ics [15] Source NYCO24364.dmg/Macintosh HD Device [15] /Users/Stmy/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/B14757FE-C93C-4036-8689-2E68016D725A.i File cs [16] Source NYCO24364.dmg/Macintosh HD Device [16] /Users/Stoty/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/DCDEACCD-OCCO-47F3-9CC9-E79557AD99 File 88.ics [17] Source NYCO24364.dmg/Macintosh HD Device [17] /Users/Stmy/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/3F974A70-6BFD4BC3-9D60-1252573D9257. File ics [18] Source NYCO24364.dmg/Macintosh HD Device [18] /Users/Stmy/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/C814D5FE-0342-41C4-B5C3-25FAFFEA57A File D.ics [19] Source NYCO24364.dmg/Macintosh HD Device [19] /Users/Stmy/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/7BD0495F-7D63-45EE-9EEO-B37EEFF45C3 File 7.ics [20] Source NYCO24364.dmg/Macintosh HD Device [20] /Users/Stoty/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/33C8AD82-C60B4C7F-9638-B9F8A9331F6 File A.ics [21] Source NYCO24364.dmg/Macintosh HD Device [21] /Users/Stoty/Library/Calendars/DAA30B20-EDE1-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/63AE3C5B-3362-4300-9108-10F2BC699EC6.i File cs EFTA01065114 [22] Source NYCO24364.dmg/Macintosh HD Device [22] /Users/Stoty/Library/Mail/V3/IMAP-jeevacation@imap.gmail.com/[Gmail].mbox/All Mail.mbox/E5 Source 84A8D I -AC8E-474D-AC32-CFA8E4A73FEC/Data/8/2/3/Attachments/328645/3/Mail Attachment.i File cs [23] Source NYCO24364.dmg/Macintosh HD Device /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- [23] 8479-4FEE-A3AB-CD214F393F83.calendar/Events/040000008200E00074C5B7101A82E00800000 Source 0001044C7B217FOCD01000000000000000010000000563FC I 8E5BE18A44B9F341A5F17F7DBF.i File cs [24] Source NYCO24364.dmg/Macintosh HD Device [24] /Users/Stoty/Library/Mail/V3/IMAP-jeevacation@imap.gmail.com/[Gmail].mbox/All Mail.mbox/E5 Source 84A8D I -AC8E-474D-AC32-CFA8E4A73FEC/Data/8/2/3/Attachments/328161/3/Mail Attachment.i File cs [25] Source NYCO24364.dmg/Macintosh HD Device /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- [25] 8479-4FEE-A3AB-CD214F393F83.calendar/Events/040000008200E00074C5B7101A82E00800000 Source 00010A402AB86EDCDO1 0000000000000000100000000737AB684E086749BB166973406142EE.i File cs [26] Source NYCO24364.dmg/Macintosh HD Device [26] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/3 I 2E790E-8211-4D46-98C7-97656C0EAF05.i File cs [27] Source NYCO24364.dmg/Macintosh HD Device [27] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/9930A3BB-9A7F-4A75-A64A-360CC973C34 File B.ics [28] Source NYCO24364.dmg/Macintosh HD Device [28] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/8AFEB101-EBC4-4B02-AFCF-C64E89EA755 File I .ics [29] Source NYCO24364.dmg/Macintosh HD Device [29] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 84794FEE-A3AB-CD214F393F83.calendar/Events/3DOE78BC-E6CC-4914-9891-589A1D7 I 263 File D.ics EFTA01065115 [30] Source NYCO24364.dmg/Macintosh HD Device [30] /Users/Stoty/Library/Calendars/DAA30B20-EDEI-466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/5B1FC9F0-AF90-4127-B049-A213F8C94D4 File D.ics [31] Source NYCO24364.dmg/Macintosh HD Device [31] /Users/Stoty/Library/Calendars/DAA30B20-EDE I -466F-83A2-6380E51D8FB6.caldav/F2B08DD4- Source 8479-4FEE-A3AB-CD214F393F83.calendar/Events/B9D09748-5298-49BC-B18B-A686CBC78F0 File A.ics [32] Source NYCO24364.dmg/Macintosh HD Device [32] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/58B8B59A-7C99-4B94-B380-584BB223 I FO File B.ics [33] Source NYCO24364.dmg/Macintosh HD Device [33] illsers/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/OE4303FD-3FA3-4947-B89D-097A26E05A1 File 7.ics [34] Source NYCO24364.dmg/Macintosh HD Device [34] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/EBC53F66-3310-4834-9FF9-7B8A815DDAF File E.ics [35] Source NYCO24364.dmg/Macintosh HD Device [35] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/DE179160-517F-46C1-9A3B-2349DB4F3A3 File A.ics [36] Source NYCO24364.dmg/Macintosh HD Device [36] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/4E I 6F748-24A4-4DA9-95DF-9562A I 57BB7 File 8.ics [37] Source NYCO24364.dmg/Macintosh HD Device [37] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/4C637E4C-ED10-47BE-9EE4-BF7C71289EE File A.ics [38] NYCO24364.dmg/Macintosh HD Source EFTA01065116 Device [38] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/35FE9F22-004B-4513-A9CE-OCC569DF38A File 5.ics [39] Source NYCO24364.dmg/Macintosh HD Device [39] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/7431A02D-6F5B-41DB-8033-36C8D3FC8BD File 9.ics [40] Source NYCO24364.dmg/Macintosh HD Device [40] /Users/Story/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/C3C123F8-6AD6-4766-A03D-BEDADDE47 File C04.ics [41] Source NYCO24364.dmg/Macintosh HD Device [41] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/3BB3EC7A-2DA3-4DDA-ACAF-13323F2844 File 86.ics [42] Source NYCO24364.dmg/Macintosh HD Device [42] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/1656CBA8-8D54-44A0-8B15-4C6D43019FA File I .ics [43] Source NYCO24364.dmg/Macintosh HD Device [43] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/158C083B-C6E1-4444-9D86-36F1038F07E5.i File cs [44] Source NYCO24364.dmg/Macintosh HD Device [44] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/OF1E0ACC-78CF-4 I A2-9I74-FB69FEFE474 File 7.ics [45] Source NYCO24364.dmg/Macintosh HD Device [45] /Users/Stoty/Library/Calendars/BEOF5EBB-EFD6-423F-9100-560AA4AF4264.caldav/BE47C6FC- Source CO3B-4C1F-82FC-0A4CF4A0D019.calendar/Events/779160AF-712C-482F-92BC-ED9402626260.i File cs Case Data: Calendar Items (1-100 of 2000) Case Data: Calendar Items (201-300 of 2000) EFTA01065117