Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
1
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
UNITED STATES DISTRICT COURT
CENTRAL DISTRICT OF CALIFORNIA
HONORABLE DAVID O. CARTER, JUDGE PRESIDING
- - - - - - -
UNITED STATES OF AMERICA, ) ) CERTIFIED
Plaintiff, ) )
vs. ) No. 8:15-CR-0060-DOC ) Day 2, Volume II
1) NADER SALEM ELHUZAYEL; )2) MUHANAD ELFATIH M.A. BADAWI, ) ) Defendants. )___________________________________)
REPORTER'S TRANSCRIPT OF PROCEEDINGS
Jury Trial
Santa Ana, California
Wednesday, June 8, 2016
Debbie Gale, CSR 9472, RPR, CCRR Federal Official Court Reporter United States District Court 411 West 4th Street, Room 1-053 Santa Ana, California 92701 (714) 558-8141
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 1 of 83 Page ID #:4203
2
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
APPEARANCES OF COUNSEL:
FOR THE UNITED STATES OF AMERICA:
DEPARTMENT OF JUSTICE OFFICE OF THE UNITED STATES ATTORNEY Criminal Division BY: Judith A. Heinz
Assistant United States Attorney 312 North Spring Street 15th Floor Los Angeles, California 90012 213-894-7280 [email protected]
DEPARTMENT OF JUSTICE OFFICE OF THE UNITED STATES ATTORNEY Criminal Division BY: Deirdre Z. Eliot
Assistant United States Attorney 411 West 4th Street Suite 8000 Santa Ana, California 92701 714-338-3500 [email protected]
DEPARTMENT OF JUSTICE OFFICE OF THE UNITED STATES ATTORNEY General Crimes Section BY: Julius J. Nam
Assistant United States Attorney 312 North Spring Street Suite 1200 Los Angeles, California 90012 213-894-4491 [email protected]
FOR DEFENDANT NADER SALEM ELHUZAYEL:
Pal A. Lengyel-Leahu (retained) LAW OFFICES OF PAL A. LENGYEL-LEAHU 360 East First Street Suite 609 Tustin, California 92780 714-497-6813 [email protected]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 2 of 83 Page ID #:4204
3
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
APPEARANCES (Continued):
FOR DEFENDANT MUHANAD ELFATIH M.A. BADAWI:
Katherine T. Corrigan (CJA appointment) CORRIGAN WELBOURN AND STOKKE APLC 4100 Newport Place Suite 550 Newport Beach, California 92660 949-251-0330 [email protected]
ALSO PRESENT:
Cambria Lisonbee (assisting Ms. Corrigan) Joshua Hopps (assisting Mr. Lengyel-Leahu)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 3 of 83 Page ID #:4205
4
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
I N D E X
Jury Trial - Day 2, Volume II
PROCEEDINGS PAGE
8VICENCIA, Nicholas
11Video recording played, Exhibit No. 1003
19Video recording played, Exhibit 1005
21Video recording played, Exhibit No. 1007
27HILL, Scott
32HOM, Terry
42AHMED, Abdalla
49PALMER, Ron
57GROTE, Lena
68WALES, Scott Christopher
WITNESSES
WITNESSES DIRECT CROSS REDIRECT RECROSS
VICENCIA, Nicholas By Ms. Heinz 8 By Mr. Lengyel-Leahu 25 HILL, Scott By Ms. Eliot 27 HOM, Terry By Ms. Heinz 32 AHMED, Abdalla By Ms. Heinz 43
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 4 of 83 Page ID #:4206
5
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
WITNESSES (Continued)
WITNESSES DIRECT CROSS REDIRECT RECROSS
PALMER, Ron By Ms. Eliot 49 GROTE, Lena By Ms. Eliot 58 WALES, Scott By Ms. Eliot 69
EXHIBITS
EXHIBIT NO./DESCRIPTION IDENTIFICATION IN EVIDENCE
601 31Black iPhone 606 13Black duffle bag
belonging to Defendant Elhuzayel
607 13Large grey suitcase with
rollers belonging to Defendant Elhuzayel
608 13Small black laptop
computer case belonging to Defendant Elhuzayel
617 23Thumb drive from duffle
bag (Exhibit 606) 618 24Travel power adapter
from duffle bag (Exhibit 606)
619 24Receipt from Staples
retrieved from duffle bag (Exhibit 606)
1001 15Depiction of Turkish
Airlines check-in counter at LAX
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 5 of 83 Page ID #:4207
6
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
EXHIBITS
EXHIBIT NO./DESCRIPTION IDENTIFICATION IN EVIDENCE
1002 15Depiction of Turkish
Airlines check-in counter at LAX
1003 11Video recording
1004 18Security surveillance
video of Defendant Elhuzayel at LAX
1005 19Security surveillance
video of Defendant Elhuzayel at LAX during luggage search
1007 21Security surveillance
video of agents leaving LAX with luggage
1021 47Document with English
translations of Arabic words, phrases, etc.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 6 of 83 Page ID #:4208
7
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
SANTA ANA, CALIFORNIA, WEDNESDAY, JUNE 8, 2016
Day 2, Volume II
(10:27 a.m.)
(Outside the presence of the jury.)
THE COURT: Okay. Counsel, we're on the record
outside the presence of the jury.
We had screens set up for any overflow. I didn't
want it packed, and I had no idea what to expect. I'm ready
to take down that screen. My guess is after opening
statement, there's going to be a significant decrease in
attendees in the audience.
MS. CORRIGAN: I would agree.
THE COURT: So we can disassemble that.
TECHNICIAN: Okay. Take it out now?
THE COURT: I'd take it out now. Maybe we'll set
it up for closing arguments.
Counsel, I'm going to summon the jury at this time.
(In the presence of the jury.)
THE COURT: All right. The jury's present. The
alternates are present. All counsel, all parties are
present.
Counsel on behalf of the government, would you like
to call your first witness, please.
MS. HEINZ: Yes, Your Honor. The United States
calls Special Agent Nicholas Vicencia.
1
2
3
410:27
510:27
6
710:27
8
9
10
11
1210:27
1310:27
1410:27
1510:28
16
1710:32
1810:33
1910:33
20
21
2210:33
23
2410:33
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 7 of 83 Page ID #:4209
8
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: Thank you. Would you step forward,
sir, and stop at that location and raise your right hand,
please.
NICHOLAS VICENCIA, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: Yes, I do.
THE COURT: Thank you, sir. If you would please
be seated in the witness box. It's just to my left. The
entrance to the witness box is closest to the wall.
And after you're seated, sir, could you face the
jury, state your full name and spell your last name, please.
THE WITNESS: Special Agent Nicholas Vicencia,
V-I-C-E-N-C-I-A.
THE COURT: Thank you.
This is direct examination by the government.
DIRECT EXAMINATION
BY MS. HEINZ:
Q. Good morning, Special Agent Vicencia.
A. Good morning.
Q. What is your current job?
A. I'm a Special Agent with the Federal Bureau of
Investigation, the FBI.
Q. And how long have you been a Special Agent with the
Federal Bureau of Investigation?
A. Since July 2006.
Q. What is your current assignment?10:35
110:34
2
3
410:34
510:34
610:34
7
8
910:34
10
1110:34
12
1310:34
1410:34
1510:34
1610:34
1710:34
1810:34
1910:34
2010:34
21
2210:34
23
2410:35
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 8 of 83 Page ID #:4210
9
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. I'm assigned to the Joint Terrorism Task Force in
Orange County, California.
Q. On the afternoon of May 21st, 2015, where were you?
A. I was at the Los Angeles International Airport, also
known as LAX.
Q. And specifically where in LAX were you?
A. I was at the Tom Bradley International Terminal.
Q. When you were at the Tom Bradley International airport
at LAX on May 21st 2015, did you see either of the
defendants in this case?
A. Yes, I did.
Q. Do you see that person sitting here?
A. Yes.
Q. Please describe where the person is sitting.
A. He's sitting at the second defense counsel table,
wearing a gray suit.
THE COURT: All right. The record will indicate
he's identified Mr. Elhuzayel.
BY MS. HEINZ:
Q. When you first saw Defendant Elhuzayel at LAX on
May 21st, 2015, where was he?
A. I first observed him getting out of a car curbside in
front of the Tom Bradley International Terminal.
Q. And was he carrying anything?
A. Yes.10:36
110:35
2
310:35
410:35
5
610:35
710:35
810:35
9
10
1110:35
1210:35
1310:35
1410:35
1510:35
16
1710:35
18
1910:36
2010:36
21
2210:36
23
2410:36
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 9 of 83 Page ID #:4211
10
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. What was he carrying?
A. He had three pieces of luggage.
Q. And once he got out of the car, was he alone?
A. Yes. He was dropped off.
Q. Okay. I'd like you to look at what's been marked as
Government's Exhibit 1003.
Special Agent Vicencia, what is Government's
Exhibit 1003?
A. It's a copy of LAX surveillance security footage.
Q. Okay. And is that security footage -- is that a video?
A. Yes.
Q. And what does that show?
A. It shows the Defendant Elhuzayel entering the Tom
Bradley International Terminal from the curb with his
luggage.
Q. And does what's been marked as Government's
Exhibit 1003 accurately depict what you saw
Defendant Elhuzayel doing at LAX on May 21st, 2015?
A. Yes.
MS. HEINZ: Your Honor, move to admit Government's
Exhibit 1003.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, Your Honor.
THE COURT: Received. 10:37
110:36
210:36
310:36
410:36
510:36
6
710:36
8
910:36
1010:36
1110:37
1210:37
1310:37
14
15
1610:37
17
18
1910:37
2010:37
21
2210:37
2310:37
2410:37
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 10 of 83 Page ID #:4212
11
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
(Exhibit No. 1003 received in evidence.)
THE COURT: You may play 1003.
(Video recording played.)
MS. HEINZ: All right. Could you freeze the frame
for a moment, Mr. Lee.
(Technician complies.)
MS. HEINZ: All right. Is it possible to back
that up a little bit?
(Technician complies.)
MS. HEINZ: Thank you. That's fine. Freeze it
there.
All right. Is it possible to enlarge the image?
(Technician complies.)
BY MS. HEINZ:
Q. Special Agent Vicencia, could you please look at the
image on the video. Do you recognize who that is?
A. Yes.
Q. Who is it?
A. It's Defendant Nader Elhuzayel.
Q. Special Agent Vicencia, would you please look at what
has been marked as Government's 606.
What is Government's Exhibit 606?
A. It's one of Defendant Elhuzayel's pieces of luggage.
Q. When you look at the video, at the picture that's up on
the screen, do you see Government's Exhibit 606?
110:37
210:37
310:37
410:38
5
610:38
710:38
8
910:38
1010:38
11
1210:38
1310:39
1410:39
1510:39
16
1710:39
1810:39
1910:39
2010:39
21
2210:39
2310:39
2410:39
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 11 of 83 Page ID #:4213
12
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. I'm not sure which piece it is. It just says, "luggage
bag."
Q. Well, could you look at the actual exhibit?
A. Yeah, may I get up?
(Witness approaches physical exhibits:) It's -- it is
the bag that's in his left hand, a black duffel bag,
carry-on bag.
Q. So it's a black carry-on bag?
A. Yes.
Q. All right. Actually, I'm gonna ask you to identify a
couple of exhibits here. Okay?
So since you're going over to the side, could you please
look at what's been marked as Government's Exhibit 607 and
Government's Exhibit 608.
And perhaps you could bring those nearer to you so you
can talk about them.
A. 607 and 608 are a laptop bag and a roller bag.
Q. All right. So to be clear, take a look at what's been
marked as Government's Exhibit 607. Okay?
And could you just generally describe what is
Government's Exhibit 607?
A. Yes. It's a large gray suitcase with rollers.
Q. And could you also describe briefly what has been
marked as Government's Exhibit 608?
A. It's a small, black, laptop computer bag.10:42
110:40
2
310:40
410:40
510:40
6
7
810:40
910:40
1010:40
11
1210:40
13
14
1510:40
16
1710:41
1810:41
19
2010:41
21
2210:41
2310:41
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 12 of 83 Page ID #:4214
13
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. Okay. And when you look at the screen, what is the
stop-freeze frame of the video that is Government's
Exhibit 1003?
Do you see these three bags that we've been talking
about, which would be Government's Exhibits 606, 607 and
608?
A. Yes, I do.
Q. Could you point out to us where each one is?
A. On the screen?
Q. Yes.
A. Government's Exhibit 607 is in his right hand. He's
rolling it behind him.
Government 606 is in his left hand, the black bag that
he's carrying.
And Government 608 is the laptop bag that's over his
left shoulder.
MS. HEINZ: Your Honor, I'd move into evidence
Government's Exhibits 606, 607 and 608.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, Your Honor.
THE COURT: Each are received: 606, 607 and 608.
(Exhibit Nos. 606, 607, and 608 received in
evidence.)
MS. HEINZ: Your Honor, may we take a brief moment10:43
110:42
2
3
410:42
5
6
710:42
810:42
910:42
1010:42
1110:42
12
1310:42
14
1510:42
16
1710:42
18
1910:42
2010:42
2110:42
2210:42
2310:43
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 13 of 83 Page ID #:4215
14
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
to show these bags to the jury?
THE COURT: You can hold them up for just a
moment, Counsel.
THE WITNESS: Yes, Your Honor.
This is 608, the laptop bag. (Indicating.)
THE COURT: Thank you.
THE WITNESS: Carry-on bag. (Indicating.)
THE COURT: What was the last one? Was that 607?
THE WITNESS: 606.
THE COURT: 606. Thank you.
THE WITNESS: This one's -- this is 607.
(Indicating.)
THE COURT: All right. Thank you.
Now let's continue, Counsel.
BY MS. HEINZ:
Q. Special Agent Vicencia, after you saw
Defendant Elhuzayel enter the Tom Bradley International
Airport (sic) at LAX on May 21st, 2015, where did he go
next?
A. I saw him go to the Turkish Airlines check-in counter.
Q. Okay. Would you please look at what's been marked as
Government's Exhibit 1001 and 1002.
Do Government's Exhibit 1001 and 1002 accurately depict
the Turkish Airlines counter at the Tom Bradley Terminal at
LAX as they appeared on May 21st, 2015?
1
210:43
3
410:43
510:43
610:43
710:43
810:43
910:43
1010:43
1110:43
12
1310:43
1410:43
1510:43
1610:43
17
18
19
2010:43
2110:43
22
2310:44
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 14 of 83 Page ID #:4216
15
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes, they do.
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 1001 and 1002.
THE COURT: Each are received, unless there's an
objection by counsel.
MS. CORRIGAN: No objection.
MR. LENGYEL-LEAHU: No objection, Your Honor.
(Exhibit Nos. 1001 and 1002 received in
evidence.)
BY MS. HEINZ:
Q. Please describe what, if anything, you saw
Defendant Elhuzayel do at the Turkish Airlines ticket
counter at LAX on May 21, 2015.
A. I observed him interacting with a ticket agent for a
few minutes.
When they were working on his paperwork, I also observed
him speaking with another passenger in line.
Q. And what, if anything, did you see happen with the
bags, the three bags that he was carrying?
A. After they provided him a ticket and a boarding pass,
he checked in his large gray roller bag and also his small
black carry-on bag. And he had his laptop bag still over
his shoulder.
Q. And did he receive any documents there at the ticket
counter?
110:44
210:44
3
410:44
5
610:44
710:44
810:44
9
1010:44
1110:44
12
13
1410:44
15
1610:45
17
1810:45
19
2010:45
21
22
23
2410:45
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 15 of 83 Page ID #:4217
16
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. I observed the ticket agent give him what appeared to
be a passport and what appeared to be tickets or boarding
passes.
Q. And did you see Defendant Elhuzayel leave the ticket
counter?
A. Yes.
Q. Where did he go?
A. I observed him walking on the west side of the
terminal, through the terminal in the construction area, to
the bottom of the escalator at the TSA checkpoint.
Q. And then what happened?
A. I observed him interact with the, uh, agent who was
checking his boarding pass and his passport. I observed him
take the -- his passport and tickets back, and I observed
him running almost in a sprintlike fashion back towards the
terminal, towards the ticket counter.
Q. And did you continue to observe him as he went to the
Turkish Airlines ticket counter?
A. Yes.
Q. So what happened there at the Turkish Airlines ticket
counter?
A. I observed him interacting with, again, a Turkish
Airlines employee for few minutes. And then another Turkish
Airlines employee approached me.
Q. And then at some point in time, did you go back behind10:46
110:45
2
3
410:45
5
610:45
710:45
810:45
9
10
1110:46
1210:46
13
14
15
16
1710:46
18
1910:46
2010:46
21
2210:46
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 16 of 83 Page ID #:4218
17
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
the ticket counter?
A. Yes, I did.
Q. And what happened there?
A. The Turkish Airline employee told me that the defendant
wanted to get his carry-on bag from being checked, and he
wanted to take it on the plane with him.
Q. Did you direct the Turkish Airlines employee to do
anything?
A. He asked -- the Turkish Airline employee asked me if it
was okay to give him back his bag, and I said it was.
Q. And then at that time, did you come out from behind the
ticket counter and stand in a position where you could
observe Defendant Elhuzayel?
A. Yes.
Q. So what happened then? Where did he go then?
A. I observed the employee give him back his second
carry-on bag, and I observed him going back to the TSA
checkpoint.
Q. And just to be clear, we're talking about what is
Government's Exhibit 606 when we're talking about the
carry-on luggage bag; is that correct?
A. Correct.
Q. Please look at what's been marked as Government's
Exhibit 1004.
What is Government's Exhibit 1004?10:48
1
210:46
310:46
410:46
5
6
710:47
8
910:47
10
1110:47
12
13
1410:47
1510:47
1610:47
17
18
1910:47
20
21
2210:47
2310:47
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 17 of 83 Page ID #:4219
18
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. It's a security surveillance video of
Defendant Elhuzayel at the top of the escalator, entering
the line for the TSA security checkpoint.
Q. Does Government's Exhibit 1004 accurately depict what
you observed Defendant Elhuzayel doing on May 21st, 2015?
A. Yes, it does.
MS. HEINZ: Your Honor, move to admit Government's
Exhibit 1004.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No objection.
THE COURT: 1004 is received.
You may play 1004 received.
(Exhibit No. 1004 received in evidence.)
(Video recording played.)
MS. HEINZ: Okay. Could you please freeze that.
BY MS. HEINZ:
Q. Special Agent Vicencia, do you see the defendant on the
screen in front of you?
A. Yes.
Q. Okay. And again, that is Government's Exhibit 1004; is
that correct?
A. Yes.
Q. Okay. Please look at what's been marked as
Government's Exhibit 1005.
110:48
2
3
410:48
5
610:48
710:48
8
910:48
1010:48
1110:48
1210:48
1310:48
1410:48
1510:48
1610:48
1710:48
1810:49
19
2010:49
2110:49
22
2310:49
2410:49
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 18 of 83 Page ID #:4220
19
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
What is Government's Exhibit 1005?
A. It's, again, LAX surveillance security video of
Defendant Elhuzayel having his luggage searched by TSA
personnel.
Q. And does Government's Exhibit 1005 accurately depict
what you observed Defendant Elhuzayel doing at LAX on
May 21st, 2015?
A. Yes.
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 1005.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: (No response.)
THE COURT: Received.
(Exhibit No. 1005 received in evidence.)
THE COURT: You may play 1005.
(Video recording played.)
BY MS. HEINZ:
Q. Special Agent Vicencia, as we watch Government's
Exhibit 1005, could you look -- is Defendant Elhuzayel
carrying the black carry-on bag that is Government's
Exhibit 606?
A. Yes, he is.
Q. Did you take Government's Exhibit 606 from
Defendant Elhuzayel on May 21st, 2015?
110:49
210:49
3
4
510:49
6
7
810:49
910:49
10
1110:49
1210:49
1310:49
1410:49
1510:50
1610:50
1710:50
1810:50
1910:50
20
21
22
2310:50
2410:50
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 19 of 83 Page ID #:4221
20
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes, I did.
Q. Please describe that.
A. He was being escorted into an interview room, and
before he walked into the room, I removed his laptop bag and
the carry-on duffel bag.
Q. And the carry-on bag is Government's Exhibit 606?
A. Correct.
Q. And when you took it from him, where did you put it?
A. I placed it on a table outside of the interview room.
Q. Did you see any FBI agents there by the table?
A. Yes.
Q. How many?
A. There's approximately three or four FBI agents. There
was also customs agents and TSA agents, LAX police.
Q. And did the FBI agents know that that black carry-on
bag -- did they know that that black carry-on bag that is
Government's Exhibit 606 -- did they know that that belonged
to Defendant Elhuzayel?
MR. LENGYEL-LEAHU: Objection, Your Honor. Calls
for speculation.
THE COURT: Sustained.
BY MS. HEINZ:
Q. Please look at what's been marked as Government's
Exhibit 1007.
What is Government's Exhibit 1007?10:52
110:50
210:50
310:50
4
5
610:51
710:51
810:51
910:51
1010:51
1110:51
1210:51
1310:51
14
1510:51
16
17
18
1910:51
20
2110:51
2210:51
2310:51
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 20 of 83 Page ID #:4222
21
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. It's again surveillance footage at LAX showing two
agents leaving the terminal with the defendant's luggage
that he arrived with.
Q. Okay. And does Government's Exhibit 1007 accurately
depict the two federal agents leaving the Tom Bradley
terminal at LAX on May 21st, 2015?
A. Yes, it does.
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 1007.
THE COURT: Any objection, Counsel?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No objection.
THE COURT: 1007 is received into evidence.
(Exhibit No. 1007 received in evidence.)
THE COURT: You may play 1007.
(Video recording played.)
MS. HEINZ: Okay. Could you freeze that for a
minute.
BY MS. HEINZ:
Q. Special Agent Vicencia, when you look at what is
Government's Exhibit 1007, do you recognize the individuals
that appear to be carrying luggage there?
A. Yes, I do.
Q. Okay. And who are they?
A. One carrying the roller bag, which is 1007, is an FBI10:53
110:52
2
3
410:52
5
6
710:53
810:53
9
1010:53
1110:53
1210:53
1310:53
1410:53
1510:53
1610:53
1710:53
18
1910:53
2010:53
21
22
2310:53
2410:53
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 21 of 83 Page ID #:4223
22
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Special Agent. And then the gentleman in the white T-shirt
carrying the laptop bag and the carry-on bag is a task force
officer with the Joint Terrorism Task Force, who's assigned
to the Drug Enforcement Administration.
Q. Sometime in May 2016, did you see Exhibit 606? Again,
that is the black carry-on bag.
A. Yes, I did.
Q. Where did you see it?
A. We saw it at the FBI office in Orange, California.
Q. And specifically was it in an FBI evidence room?
A. It was initially in an FBI storage room, and it was
moved to a conference room.
Q. Okay. And did you watch that happen?
A. Yes.
Q. And was there another special agent there?
A. Yes. There was two other agents there.
Q. Okay. And what, if anything, did you watch the special
agent do there?
A. I watched the agent remove the Government 606 out of
the evidence box, and I also observed the agent remove a USB
drive from the bag.
Q. Okay. Would you please look at what's been marked as
Government's Exhibit 617.
What is Government's Exhibit 617?
A. It's the thumb drive the agent removed from the bag.10:55
1
2
3
4
510:54
6
710:54
810:54
910:54
1010:54
1110:54
12
1310:54
1410:54
1510:54
1610:54
1710:54
18
1910:54
20
21
2210:55
23
2410:55
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 22 of 83 Page ID #:4224
23
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 617.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, Your Honor.
THE COURT: Received.
(Exhibit No. 617 received in evidence.)
BY MS. HEINZ:
Q. Please look at what has been marked as Government's
Exhibit 618.
What is Government's Exhibit 618?
A. It's a travel power adapter that was also removed from
the bag that day.
Q. From -- this is during May of 2016?
A. May 11th, 2016, yes.
Q. Okay. And was it in the same place in the luggage as
the USB drive?
A. Yes.
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 618.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: (No response.)
THE COURT: Counsel, any objection?
MR. LENGYEL-LEAHU: The portable phone charger?10:56
110:55
2
310:55
410:55
510:55
610:55
710:55
810:55
910:55
10
1110:55
1210:56
13
1410:56
1510:56
1610:56
17
1810:56
1910:56
20
2110:56
2210:56
2310:56
2410:56
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 23 of 83 Page ID #:4225
24
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: It's travel power adapter.
MR. LENGYEL-LEAHU: No objection.
THE COURT: Received.
(Exhibit No. 618 received in evidence.)
BY MS. HEINZ:
Q. Please look at what's been marked as Government's
Exhibit 619.
What is Government Exhibit 619?
A. It's a receipt from Staples that was in the same area
as the USB drive and also the travel adapter that was
located in the bag.
MS. HEINZ: Your Honor, move to admit into
evidence Government's Exhibit 619.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, Your Honor.
THE COURT: Received.
(Exhibit No. 619 received in evidence.)
MS. HEINZ: Can you please publish Government's
Exhibit 619?
THE COURT: Counsel, he can simply describe the
data on it.
MS. HEINZ: Thank you, Your Honor.
BY MS. HEINZ:
Q. Special Agent Vicencia, looking at Government's10:57
110:56
210:56
310:56
410:56
510:56
610:56
7
810:56
910:56
10
11
1210:57
13
1410:57
1510:57
1610:57
1710:57
1810:57
1910:57
20
2110:57
22
2310:57
2410:57
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 24 of 83 Page ID #:4226
25
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Exhibit 619, do you see -- what is it, first of all?
A. It's a receipt from Staples office store.
Q. Okay. And what is the date on it?
A. It's dated May 21st, 2015.
Q. And is there a time on the receipt?
A. Yes.
Q. What is that time?
A. 2:47 a.m. (Verbatim.)
Q. Okay. And on Government's Exhibit 619, which you've
described as the receipt from Staples, do you see any
information on there that is related to Government's
Exhibit 617 and 618?
A. Yes.
Q. What is that information?
A. It shows the prices and that they were purchased on the
receipt.
MS. HEINZ: Thank you, Your Honor. Nothing
further.
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
CROSS-EXAMINATION
BY MR. LENGYEL-LEAHU:
Q. Did you inventory the entire property from the carry-on
bags?
A. Did I personally?
Q. Yes.10:59
1
210:57
310:57
410:58
510:58
610:58
710:58
810:58
910:58
10
11
12
1310:58
1410:58
1510:58
16
1710:58
18
1910:58
2010:58
2110:58
2210:58
23
2410:59
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 25 of 83 Page ID #:4227
26
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. No.
Q. Did this occur in your presence on -- when was it --
May 11th?
A. On May 11, 2016?
Q. Yes.
A. I did not, no. The entire bag was looked through by
another agent.
Q. So the only items that you saw removed from the bags
would be the thumb drive you previously described and the
portable phone charger and the Staples receipt?
A. I saw some clothes that were in there, and I saw some
sort of workout device for -- it was like an elastic piece
of workout -- I can't -- really know the name of it, but it
was like a workout piece.
MR. LENGYEL-LEAHU: One second, please,
Your Honor.
Nothing further, Your Honor.
THE COURT: Cross-examination, Ms. Corrigan.
MS. CORRIGAN: No, Your Honor. This doesn't
pertain to my client. Thank you.
THE COURT: Redirect?
MS. HEINZ: No redirect, Your Honor.
THE COURT: All right. Sir, we're going to ask
you to remain on call.
Counsel, unless you indicate differently, I'll ask11:00
110:59
210:59
3
410:59
510:59
610:59
7
810:59
9
10
1110:59
12
13
14
1511:00
16
1711:00
1811:00
1911:00
20
2111:00
2211:00
2311:00
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 26 of 83 Page ID #:4228
27
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
each witness to remain on call so that witnesses don't need
to be subpoenaed. If there's a default position or if you
want a witness excused, I'll take that up at the end of the
day.
Sir, you're on call. You may please step down.
THE WITNESS: Yes, Your Honor.
(Witness steps down.)
THE COURT: Your next witness, please.
MS. ELIOT: Your Honor, the government calls
Special Agent Scott Hill.
THE COURT: Thank you, sir. Would you raise your
right hand, please.
SCOTT HILL, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: I do.
THE COURT: Thank you. If you would walk to this
side of the courtroom, please, along the railing where the
jury is located. After you're seated, if you would face the
jury. State your full name and spell your last name, sir.
THE WITNESS: Scott Hill, H-I-L-L.
THE COURT: Direct examination by the government.
DIRECT EXAMINATION
BY MS. ELIOT:
Q. Good morning. What do you do for a living?
A. Good morning. I'm a special agent with the Federal
Bureau of Investigation.
1
2
3
4
511:00
611:00
711:00
811:00
911:00
10
1111:01
12
1311:01
1411:01
1511:01
16
17
18
1911:01
2011:01
2111:01
2211:01
2311:01
2411:01
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 27 of 83 Page ID #:4229
28
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. How long have you been a special agent with the FBI?
A. 14 years.
Q. In general, what are your duties and responsibilities
as a special agent?
A. Currently, I'm a team leader on our special weapons and
tactics team.
Q. And what is that -- is that known as SWAT?
A. Yes, it is.
Q. And are you assigned to CT7 as well?
A. That's correct.
Q. And what is CT7?
A. CT7's our crisis response squad, so that squad
encompasses all our squads for special missions, SWATs,
evidence response, et cetera.
Q. And how long have you been assigned to CT7?
A. Approximately eight months.
Q. Where were you assigned prior to joining CT7?
A. I was full-time with the firearms training unit.
Q. Did you receive training when you first joined the FBI?
A. I did.
Q. Where does that training take place?
A. In Quantico, Virginia.
Q. As a member of the FBI SWAT team, have you conducted
arrests?
A. Yes.11:02
111:01
211:01
311:01
4
511:01
6
711:01
811:01
911:01
1011:02
1111:02
1211:02
13
14
1511:02
1611:02
1711:02
1811:02
1911:02
2011:02
2111:02
2211:02
2311:02
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 28 of 83 Page ID #:4230
29
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. Where were you on May 21st, 2015?
A. I was in the County of Orange, and specifically, in the
City of Anaheim, California.
Q. Were you at a gas station that day?
A. Yes, I was.
Q. What did you do at the gas station?
A. We effected the arrest of two individuals in a vehicle,
the ARCO gas station.
Q. Is either of the individuals that you arrested present
in the courtroom today?
A. Yes.
Q. Can you please point out the person you arrested and
describe where he's seated?
A. Individual to the right, dark blue suit, gray shirt,
black hair, writing on a yellow notepad.
THE COURT: Record will indicate that the agent's
identified Mr. Badawi.
BY MS. ELIOT:
Q. Did Defendant Badawi have any possessions with him at
the time of his arrest on May 21st, 2015?
A. Yes, he did.
Q. We'd like to show you what has been marked as
Government's Exhibit 601.
(Exhibits provided to the witness.)
111:02
211:02
3
411:02
511:02
611:02
711:02
8
911:02
10
1111:03
1211:03
13
1411:03
15
1611:03
17
1811:03
1911:03
20
2111:03
2211:03
23
2411:03
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 29 of 83 Page ID #:4231
30
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
BY MS. ELIOT:
Q. Do you recognize that exhibit?
A. Yes, I do.
Q. What is it?
A. It is a black iPhone.
Q. And when did you see this before? (Verbatim.)
A. This was on or about the person of Badawi in his
vehicle on the driver's side.
Q. Did you give the iPhone to anyone after you took it
during the arrest of Defendant Badawi?
A. Yes, I did. I passed it on to an agent that came after
we effected the arrest.
Q. What is the purpose of passing that on to that agent?
A. To maintain chain of custody.
Q. Do you recognize the bag that the iPhone is in now,
generally?
A. Generally, yes.
Q. What is it?
A. It is a brown bag.
Q. And what is that used for by the FBI? I'm sorry. The
clear plastic bag?
A. The clear plastic bag, this would be an evidentiary bag
that all of our evidence is maintained in, varying --
different sizes, but of this clear plastic nature.
Q. And is the exhibit in the same or substantially the11:04
111:03
211:03
311:03
411:03
511:03
611:03
711:03
8
911:04
10
1111:04
12
1311:04
1411:04
1511:04
16
1711:04
1811:04
1911:04
2011:04
21
2211:04
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 30 of 83 Page ID #:4232
31
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
same condition as when you took possession of it at the time
of Badawi's arrest?
A. Yes it is.
MS. ELIOT: Your Honor, the government moves to
admit Exhibit 601.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, sir.
THE COURT: Received.
(Exhibit No. 601 received in evidence.)
BY MS. ELIOT:
Q. Did you take anything else from Defendant Badawi at the
time of his arrest?
A. I believe there was a wallet there as well.
Q. What, if anything, did you do with the wallet that you
took custody of?
A. All the items we placed on the roof of the vehicle.
Q. And after it was placed on the roof, did you do
anything with it?
A. When the agents came that we gave the phone to, we gave
all the other items to that person as well.
MS. ELIOT: No further questions.
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
MR. LENGYEL-LEAHU: No. Thank you, Your Honor.
THE COURT: Cross-examination, Ms. Corrigan.11:05
1
2
311:04
411:04
5
611:04
711:04
811:04
911:04
1011:04
1111:04
1211:04
13
1411:04
1511:04
16
1711:05
1811:05
19
2011:05
21
2211:05
2311:05
2411:05
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 31 of 83 Page ID #:4233
32
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
MS. CORRIGAN: No, Your Honor.
THE COURT: Agent, we're going to place you on
call. Thank you very much. You may step down, sir.
THE WITNESS: Yes, sir.
(Witness steps down.)
THE COURT: Counsel, your next witness, please.
MS. HEINZ: Government calls Terry Hom.
THE COURT: Thank you, sir. Would you raise your
right hand, sir.
TERRY HOM, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: I do.
THE COURT: Thank you, sir. If you will walk
along the side of the jury railing, the entrance to the jury
box is closest to the wall.
Be seated, please. Face the jury, state your full
name, and spell your last name, please.
THE WITNESS: Terry J. Hom, H-O-M.
THE COURT: Thank you. Direct examination by the
government.
DIRECT EXAMINATION
BY MS. HEINZ:
Q. Good morning, Mr. Hom.
A. Good morning.
Q. Where are you employed?
A. I'm employed with the Federal Bureau of Investigation.11:06
111:05
211:05
3
411:05
511:05
611:05
711:05
811:05
9
1011:05
1111:05
1211:05
13
14
1511:06
16
1711:06
1811:06
19
2011:06
2111:06
2211:06
2311:06
2411:06
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 32 of 83 Page ID #:4234
33
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. And specifically do you work at a certain facility?
A. I work at the Orange County regional computer forensic
lab.
Q. And what is your position?
A. I am a, um, information technology specialist forensic
examiner.
Q. And for purposes of today, I'm gonna shorten that a
little bit to forensic examiner.
A. Thank you.
Q. What does a forensic examiner do?
A. A forensic examiner examines digital information such
as -- such as information on flash drives, hard drives, and
it --
Q. Does that include phones?
A. That includes cell phones, yes.
Q. And what is your educational background?
A. I have a bachelor of science in public administration,
and I have a (sic) associate's degree in electronic
technology.
Q. And please describe any work in the private sector
outside of FBI that you have done that's -- relates to the
technology of digital devices.
A. Before the bureau, I was employed as a field engineer
installing and repairing computer systems.
Q. And since you joined the FBI, what training have you11:07
111:06
211:06
3
411:06
511:06
6
711:06
8
911:07
1011:07
1111:07
12
13
1411:07
1511:07
1611:07
1711:07
18
19
2011:07
21
22
2311:07
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 33 of 83 Page ID #:4235
34
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
received in the forensic examination of digital devices?
A. I received -- I started my training in 2005 and
certified in 2006. The training involved hardware, hardware
and then software, and it included training of the forensic
software.
Q. And what training have you received in the examination
of cell phones?
A. I received training from BlackBag Technologies with a
tool called "BlackLight."
Q. What's certi- -- do you hold any certifications in
forensic examination?
A. No, I don't.
Q. In your work at the FBI, approximately how many
forensic examinations do you typically do during a week?
A. Average is maybe two to three.
Q. And approximately how many times have you testified
previously in court as a forensic examiner?
A. Four times.
Q. Like you to look at what's been marked as Government's
Exhibit 69.
THE COURT: Six-nine?
MS. HEINZ: 69.
THE COURT: Thank you.
BY MS. HEINZ:
Q. And, Mr. Hom, after you've had a chance to look at11:09
1
211:08
3
4
5
611:08
7
811:08
9
1011:08
11
1211:08
1311:08
14
1511:08
1611:08
17
1811:09
1911:09
20
2111:09
2211:09
2311:09
2411:09
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 34 of 83 Page ID #:4236
35
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
government's -- what's been marked as Government's
Exhibit 69, would you tell us what it is?
A. Yes. This is the results from an iPhone examination
that I did.
Q. Okay.
MR. LENGYEL-LEAHU: Objection. Excuse me,
Your Honor, could I approach? My exhibit folder must be out
of order.
THE COURT: You may.
MR. LENGYEL-LEAHU: I just wanna check the exhibit
'cause the folder that I was handed by the government...
THE COURT: Why don't you check with the
government.
MS. CORRIGAN: For the record, I have Exhibit 69,
Your Honor.
(Mr. Lengyel-Leahu approaches the witness.)
MR. LENGYEL-LEAHU: It's a disc.
THE COURT: It's a disc.
Okay. Counsel, your next question, please.
BY MS. HEINZ:
Q. Mr. Hom, when you look at what's been marked as
Government's Exhibit 69, how do you know what it is? Does
it have any identifying characteristics?
A. Yes. I recognize the logo from our laboratory. I
recognize my name's on it, and I recognize my initials.
1
2
311:09
4
511:09
611:09
7
8
911:09
1011:10
11
1211:10
13
1411:10
15
1611:10
1711:10
1811:10
1911:10
2011:10
2111:10
22
23
2411:10
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 35 of 83 Page ID #:4237
36
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. And does Government's Exhibit 69 contain true copies of
files that were copied from an iPhone?
MR. LENGYEL-LEAHU: Objection. Lack of
foundation, Your Honor.
THE COURT: And what's missing concerning
foundation, Counsel?
MR. LENGYEL-LEAHU: Whether he's reviewed the
exhibit prior to coming to court, had an opportunity to
correlate it with the investigation.
THE COURT: Sustained.
MR. LENGYEL-LEAHU: Thank you.
BY MS. HEINZ:
Q. Mr. Hom, have you reviewed what's been marked as
Government's Exhibit 69 previously?
A. Not since it was -- not since it left my hands and was
submitted to evidence.
Q. But once you -- once it left your hands, you had looked
at it then; is that correct?
A. Yes.
Q. Okay. And do you know that because your initials are
on it?
A. That's correct.
Q. Okay. And so, therefore, do you know that it contains
true copies of files that were copied from an iPhone?
MR. LENGYEL-LEAHU: Objection. Calls for11:11
111:10
2
311:10
4
511:11
6
711:11
8
9
1011:11
1111:11
1211:11
1311:11
14
1511:11
16
1711:11
18
1911:11
2011:11
21
2211:11
2311:11
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 36 of 83 Page ID #:4238
37
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
speculation, Your Honor.
THE COURT: Overruled. You can answer that
question, sir.
THE WITNESS: Could you repeat, please?
MS. HEINZ: Yes.
BY MS. HEINZ:
Q. Based on your review of Government's Exhibit 69, do you
know that it contains true copies of files that were copied
from an iPhone?
MR. LENGYEL-LEAHU: Same objection, Your Honor.
THE COURT: Overruled.
THE WITNESS: Yes.
BY MS. HEINZ:
Q. Please look at Government's Exhibit 601.
What is Government's Exhibit 601?
A. This is an iPhone 5.
Q. Okay. Did you perform a forensic examination of
Government's Exhibit 601?
A. Yes, I did.
Q. Okay. And how do you know that?
A. I recognize it by the bar code from our laboratory. I
recognize it from the date and my initials.
Q. Did you use a search warrant to guide your examination
of Government's Exhibit 601?
A. Yes, I did.11:13
1
211:11
3
411:11
511:11
611:12
711:12
8
9
1011:12
1111:12
1211:12
1311:12
1411:12
1511:12
1611:12
1711:12
18
1911:12
2011:12
2111:12
22
2311:13
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 37 of 83 Page ID #:4239
38
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. Okay. And how did you do that? How did it guide you?
A. It gave me the authority to do the examination on the
phone.
Q. All right. Could you please describe the process you
performed to conduct a forensic examination of Government's
Exhibit 601, the iPhone?
A. Yes. The iPhone was attached to a computer which had
the software BlackLight. Connected the phone to that
computer, then I connected a clean hard drive to receive the
extracted files from the iPhone.
I started the program, and when it completed, I
disconnected the phone and I secured the phone and that hard
drive that contained the extracted files in my locker.
Q. And what is BlackLight? What is it?
A. BlackLight is a program made by BlackBag Technologies.
And it's a very good program for devices such as iPhones.
Q. And is BlackLight software widely used by forensic
examiners?
A. Yes. It's known worldwide. It's used by many other
agencies.
Q. And did BlackLight copy the files that were on the
iPhone on the -- what's been marked as Government's
Exhibit 601? Did it copy those files?
A. It copied the files, processed the files, and from
that, a review of the copied files was made.
111:13
211:13
3
411:13
5
6
711:13
8
9
10
1111:13
12
13
1411:13
1511:14
16
1711:14
18
1911:14
20
2111:14
22
23
2411:14
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 38 of 83 Page ID #:4240
39
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. And can BlackLight copy deleted files from an iPhone?
A. Yes, it can.
Q. I'm going back to Government's Exhibit 69. Okay?
Now, I believe you testified that you created
Government's Exhibit 69; is that correct?
A. Yes, I did.
Q. Okay. So does Government's Exhibit 69 contain true
copies of files that were copied from Government's
Exhibit 601 using BlackLight?
A. Yes, it does.
Q. What happened to Government's Exhibit 601 after you
performed the forensic examination using BlackLight?
A. They were sealed and returned to evidence.
Q. And what happened to Government's Exhibit 69 after you
initialed it?
A. Same thing. It was signed, sealed, and submitted into
evidence.
Q. Like you to look at what's been marked as Government's
Exhibit 617.
What is Government's Exhibit 617?
A. This is a thumb drive.
Q. And did you make a copy of any files on Government's
Exhibit 617?
A. Yes, I did.
Q. How do you know?11:16
111:14
211:14
311:14
411:14
5
611:15
711:15
8
9
1011:15
1111:15
12
1311:15
1411:15
15
1611:15
17
1811:15
19
2011:15
2111:15
2211:15
23
2411:16
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 39 of 83 Page ID #:4241
40
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. I recognize this by -- same thing: By the bar code, by
initials and the data on the back.
Q. Did you use the search warrant to guide your processing
of Government's Exhibit 617?
A. Yes, I did.
Q. How'd you do that?
A. I read the warrant which specified this thumb drive and
allowed me to do the copying and search of the thumb drive.
Q. Please describe the process you performed to make a
copy of Government's 617.
A. Yes. I took the thumb drive. I plugged it into a
physical write blocker, which protects the thumb drive from
accidental writing to it. Then I initiated a program called
Nero, which copies the files from the thumb drive to a clean
CD, compact disc.
Q. And when you used that software, what -- I'm sorry.
Did you call it -- what did you call it again?
A. Nero, N-E-R-O.
Q. When you used that software, Nero, did it show you
whether or not the CD contained a true and accurate copy of
all the files on Government's Exhibit 617?
A. Yes. At the end of the process, it showed 100 percent
data burned or copied and it also stated that the
verification was completed.
Q. Could you please look at what's been marked as11:17
111:16
2
311:16
4
511:16
611:16
711:16
8
911:16
10
1111:16
12
13
14
15
1611:17
17
1811:17
1911:17
20
21
2211:17
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 40 of 83 Page ID #:4242
41
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Government's Exhibit 148. What is Government's Exhibit 148?
A. Yes. This is a copy of the thumb drive that I made.
Q. All right. And I'm going to call it a disc. Would
that be appropriate?
A. Compact disc, that's correct.
Q. Okay. Does the disc that is -- been marked as
Government's Exhibit 148, does it contain the copied files
from Government's Exhibit 617?
A. Yes, it does.
Q. And how do you know that?
A. I recognize the CD, the file number, the date, my name
and my initials.
Q. Okay. What did you do with Government's Exhibit 148
after you initialed it?
A. After initialing, I sealed it, signed it, checked it
into evidence.
Q. Okay. And at any time did you provide Government's
Exhibit 148 to Special Agent Scott Wales?
A. Once it was checked into evidence, it was -- it was
released to Scott Wales.
Q. And what happened to Government's Exhibit 617 after you
made a copy of it on Government's Exhibit 148?
A. Same thing; it was resealed, signed, and checked back
into evidence.
MS. HEINZ: No further questions, Your Honor.11:19
1
211:17
311:18
4
511:18
611:18
7
8
911:18
1011:18
1111:18
12
1311:18
14
1511:18
16
1711:18
18
1911:18
20
2111:18
22
2311:19
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 41 of 83 Page ID #:4243
42
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
MR. LENGYEL-LEAHU: No. Thank you, Your Honor.
THE COURT: Cross-examination, Ms. Corrigan.
MS. CORRIGAN: No, Your Honor.
THE COURT: Sir, we're going to place you on call.
Thank you very much. You may step down.
(Witness steps down.)
THE COURT: Counsel, your next witness, please.
MS. HEINZ: Government calls Abdalla Ahmed.
THE COURT: Thank you, sir. If you would step
forward between the double doors, please. Stop at that
location and please raise your right hand.
ABDALLA AHMED, CALLED BY THE GOVERNMENT, SWORN
THE COURT: I couldn't hear you, sir.
THE WITNESS: Yes.
THE COURT: All right. Thank you.
If you would please be seated in the jury box.
It's to my left. Walk along the side of the jury railing.
The entrance is closest to the wall. Be seated, please.
THE WITNESS: Thank you.
THE COURT: Pull the microphone close to you so we
can hear you. State your full name for the jury, sir.
THE WITNESS: Abdalla Ahmed.
THE COURT: Spell your last name, please.
THE WITNESS: A-H-M-E-D.11:20
111:19
211:19
311:19
411:19
511:19
6
711:19
811:19
911:19
1011:19
11
12
1311:19
1411:19
1511:20
1611:20
1711:20
18
19
2011:20
2111:20
22
2311:20
2411:20
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 42 of 83 Page ID #:4244
43
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: Direct examination by the government.
DIRECT EXAMINATION
BY MS. HEINZ:
Q. Good morning, Mr. Ahmed.
A. Good morning.
Q. Did the government hire you to prepare translations in
this case?
A. Yes.
Q. And did that work require you to translate Arabic
language words and phrases into the English language?
A. Yes.
Q. And have you done that work?
A. Yes.
Q. All right. I'm going to talk to you a little bit about
your qualifications.
Mr. Ahmed, what is your native language?
A. Arabic Sudanese.
Q. And you do speak Sudanese Arabic?
A. Yes, I do.
Q. And have you spoken Sudanese Arabic your entire life?
A. Yes.
Q. The Arabic language materials that you reviewed in this
case, did these include audio and video recordings?
A. Yes.
Q. And on these audio recordings and video recordings, did11:21
111:20
211:20
311:20
411:20
511:20
611:20
7
811:20
911:20
10
1111:20
1211:20
1311:20
1411:20
15
1611:21
1711:21
1811:21
1911:21
2011:21
2111:21
2211:21
23
2411:21
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 43 of 83 Page ID #:4245
44
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
some of the speakers speak in the Arabic language?
A. Yes.
Q. And did one of the speakers speak in Sudanese Arabic?
A. Yes.
Q. Do you also understand the Arabic language as it is
spoken in Syria and Palestine?
A. Yes, I do.
Q. And does spoken Sudanese Arabic -- does that differ a
little bit from the Arabic language that is spoken in Middle
Eastern language?
A. Yes, it is different.
Q. Do you also read Arabic?
A. Yes, I do.
Q. And can you also write in Arabic?
A. Yes.
Q. Have you been reading and writing in Arabic since you
were a child?
A. Yes, since first grade.
Q. When did you begin learning English?
A. Uh, I start learning English in the nine grade.
(Verbatim.)
Q. In the ninth grade?
A. Yes.
Q. Did you attend and receive a degree from the University
of Khartoum in Khartoum, Sudan?
1
211:21
311:21
411:21
511:21
6
711:21
811:21
9
10
1111:22
1211:22
1311:22
1411:22
1511:22
1611:22
17
1811:22
1911:22
2011:22
21
2211:22
2311:22
2411:22
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 44 of 83 Page ID #:4246
45
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes.
Q. What was that degree?
A. It's a bachelor in economy and political science.
Q. At some point did you move to the United States?
A. Yes.
Q. What year?
A. 2003.
Q. Did you attend college in the United States?
A. Yes. I went to Georgetown University, and I have a
master degree from Institute for the --
(Court reporter requests clarification for the
record.)
THE WITNESS: -- International Training.
BY MS. HEINZ:
Q. At Georgetown University, what did you study?
A. I studied "linguist." (Verbatim.)
Q. And did you attend there on a scholarship?
A. Yes. I got, um -- full scholarship from the National
Security Education Program.
Q. Have you been certified in the translation of Arabic
into English?
A. Yes, I have. I have an IL -- ILR certificate from
Georgetown University.
Q. And could you tell us a little bit about what the level
of certification is that you have?
111:22
211:22
311:22
411:22
511:22
611:22
711:22
811:22
911:22
10
1111:23
12
1311:23
1411:23
1511:23
1611:23
1711:23
1811:23
19
2011:23
21
2211:23
23
2411:23
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 45 of 83 Page ID #:4247
46
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Actually, it is Interagency Language Roundtable.
Q. That's the name of the agency that provided the
certification?
A. Yes.
Q. And what degree of certification do you have; in other
words, just tell us a little -- describe the level of
certification.
A. It's level three.
Q. What does level three mean?
A. For Arabic, it means a native speaker. Actually, I
have proficient, proficient level. For English, it is a
proficient level.
Q. Did you also previously work as a translator for the
United States military?
A. Yes.
Q. And what was the time period of that approximately?
A. Like six years.
Q. Okay. And could you describe your duties?
A. I used to translate from Arabic to English, and I did
actually translation, too, from spoken Arabic into English.
Q. So just to rephrase a little bit, is it correct to say
that you translated spoken Arabic into written English?
A. Yes.
Q. And did you also translate documents for the
United States military, taking an Arabic language document
111:23
211:23
3
411:23
511:23
6
7
811:24
911:24
1011:24
11
12
1311:24
14
1511:24
1611:24
1711:24
1811:24
1911:24
20
2111:24
22
2311:25
2411:25
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 46 of 83 Page ID #:4248
47
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
and translating it into English?
A. Yes.
Q. Would you please look at what's been marked as
Government's Exhibit 1021.
Mr. Ahmed, have you reviewed all of the translations
listed in Government's Exhibit 1021?
A. Yes, I have.
Q. Are the translations listed in Government's
Exhibit 1021 English language translations of Arabic
language words, phrases, and sentences?
A. Yes.
Q. Based on your review, are all of the translations
listed in Government's Exhibit 1021 correct and accurate?
A. Yes.
MS. HEINZ: Move Government's Exhibit 1021 into
evidence.
THE COURT: Any objection?
MS. CORRIGAN: No, Your Honor.
MR. LENGYEL-LEAHU: No, Your Honor.
THE COURT: Received.
(Exhibit No. 1021 received in evidence.)
BY MS. HEINZ:
Q. Mr. Ahmed, looking at Government's Exhibit 1021. Okay.
Since you're looking at it, I'm going to direct your
attention to the right-hand column.
1
211:25
311:25
4
511:25
6
711:25
811:25
9
10
1111:25
1211:25
13
1411:26
1511:26
16
1711:26
1811:26
1911:26
2011:26
2111:26
2211:26
2311:26
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 47 of 83 Page ID #:4249
48
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Okay.
Q. Okay. On the top of that column, it says exhibit
number; is that correct?
A. Yes.
Q. Okay. In the exhibit number column, there are numbers
with a capital A after it. Do you see that?
A. Yes.
Q. Exhibits with the capital A after the number, are these
the exhibits that contain the English language translations
of Arabic words, phrases, and sentences that you reviewed in
this case?
A. Yes.
MS. HEINZ: Your Honor, I'd move the translations
listed in Government's Exhibit 1021 into evidence subject to
a showing of relevance later on.
THE COURT: Counsel?
MS. CORRIGAN: No objection.
MR. LENGYEL-LEAHU: No objection.
THE COURT: Granted.
(Exhibit No. 1021 previously received in
evidence.)
MS. HEINZ: Nothing further, Your Honor.
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
MR. LENGYEL-LEAHU: No. Thank you, Your Honor.
THE COURT: Cross-examination, Ms. Corrigan?11:27
111:26
211:26
3
411:26
511:26
6
711:26
811:26
9
10
11
1211:26
1311:26
14
15
1611:26
1711:26
1811:27
1911:27
2011:27
21
2211:27
2311:27
2411:27
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 48 of 83 Page ID #:4250
49
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
MS. CORRIGAN: No, Your Honor.
THE COURT: Mr. Ahmad, you may step down. Thank
you, sir.
(Witness steps down.)
THE COURT: Your next witness, please, counsel.
MS. ELIOT: Your Honor, the government calls
Special Agent Ron Palmer.
THE COURT: Thank you.
Thank you, sir. Would you step forward between the
double doors, please, and raise your right hand, sir.
RON PALMER, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: I do.
THE COURT: Thank you, sir. If you would be
seated in the witness box. It's just to my left along the
wall. After you've been seated, sir, would you state your
full name, spell your last for the jurors, please.
THE WITNESS: Ron Palmer, P-A-L-M-E-R.
THE COURT: Thank you. Direct examination by the
government.
DIRECT EXAMINATION
BY MS. ELIOT:
Q. Good morning, Special Agent Palmer.
A. I'm a supervisory special agent with the Data Intercept
Technology Unit.
Q. And how long have you been with the FBI?11:28
111:27
211:27
3
411:27
511:27
611:27
7
811:27
911:27
10
1111:27
1211:27
1311:27
14
15
16
1711:28
1811:28
19
2011:28
2111:28
2211:28
2311:28
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 49 of 83 Page ID #:4251
50
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Nineteen and a half years.
Q. And is the Data Intercept Technology Unit with the FBI
known as DITU for D-I-T-U?
A. Yes, it is.
Q. Is DITU within the Operational Technology Division?
A. Yes, it is.
Q. Where is DITU located?
A. DITU is located in Quantico, Virginia, on FBI academy
grounds.
Q. How long have you been a supervisor at DITU?
A. Eight years.
Q. Can you describe generally what DITU does?
A. DITU collects, processes, and transfers electronic
surveillance information in support of the FBI's mission
under an authorized court order.
Q. And when you're talking about collection, does the data
refer to things like e-mails and Internet traffic?
A. Yes, ma'am.
Q. And in general, what are your responsibilities as a
supervisor with the Data Intercept Technology Unit?
A. When a court order is signed, it is delivered directly
to the provider that's going to be delivering us the
information. A copy of that court order is also sent
directly to our unit. I'm a supervisor over the operational
management unit that inputs those orders.
111:28
211:28
3
411:28
511:28
611:28
711:28
811:28
9
1011:28
1111:28
1211:28
1311:28
14
15
1611:29
17
1811:29
1911:29
20
2111:29
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 50 of 83 Page ID #:4252
51
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
What they do is they take the significant information in
that order, such as the start and stop date of the order,
the "sign" date, and the target that we are going to be
collecting on and put it into our system.
Once the provider gets a copy of the court order, they
will begin streaming us data.
Q. Okay. If I could stop you for a minute.
A. Okay.
Q. Thank you. We'll just go back to your background for a
moment.
A. Okay.
Q. Where were you assigned before DITU?
A. I was assigned to Mobile, Alabama, field office.
Q. Do you have a bachelor's degree?
A. Yes, I do. Mechanical engineering.
Q. After college, did you serve in the military?
A. I served seven years in the Air Force.
Q. And how many years do you have in data intercept
technology?
A. Eight years.
Q. Are you familiar generally with the various types of
internet-based accounts a user can have?
A. Yes.
Q. Are you familiar with the collection of data from the
Facebook in particular?
111:29
2
3
4
511:30
6
711:30
811:30
911:30
10
1111:30
1211:30
1311:30
1411:30
1511:30
1611:30
1711:30
1811:30
19
2011:30
2111:30
22
2311:30
2411:30
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 51 of 83 Page ID #:4253
52
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes, ma'am.
Q. At DITU, you mentioned, does the Internet service
provider -- are they the entity that actually collects the
data you're seeking pursuant to the lawful court process?
A. Yes, ma'am.
Q. In this case, did DITU obtain data from Facebook?
A. Yes, we did.
Q. And how does -- physically, how does Facebook transmit
the data to DITU?
A. It's an automatic process. Facebook sends it to us
electronically.
Q. And what does DITU do with the data upon receipt from
the provider?
A. Again, once we receive the date from a provider, the
order that we inputted, a validity check is done to make
sure that the information that we are receiving from the
provider, that we have an authorized court order in the
system for that date. Once --
MR. LENGYEL-LEAHU: Objection. Your Honor,
nonresponsive.
THE COURT: I'm sorry. I couldn't hear, Counsel.
MR. LENGYEL-LEAHU: Not responsive.
THE COURT: Restate the question. I thought it
was, but I may be wrong. Restate the question.
MS. ELIOT: I was asking precisely what does DITU11:32
111:30
211:30
3
4
511:31
611:31
711:31
811:31
9
1011:31
11
1211:31
13
1411:31
15
16
17
18
1911:31
20
2111:31
2211:31
2311:31
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 52 of 83 Page ID #:4254
53
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
do with the data once it's received. And the witness has
established that there's a quality control.
THE COURT: Just ask the question.
MS. ELIOT: We can move on.
BY MS. HEINZ:
Q. After a quality control check is conducted, what does
DITU do with the data?
A. At that point an MD5 hash is placed on the product.
That MD5 hash remains with that product for the duration.
That MD5 hash is a unique fingerprint on that product. The
product is then processed and transmitted to whatever field
office has the order.
Q. And in that process, is a product ID number assigned to
the material?
A. Yes, it is.
Q. Were you asked to review certain Facebook materials
that were assigned product ID numbers in this case?
A. Yes, we were.
Q. And did you conduct that review with the assistance of
charts setting forth the product ID number and a
corresponding Government's Exhibit ID number?
A. Yes, we did.
MS. ELIOT: We'd ask if we could place before the
witness what has been marked as Government's Exhibit 430
through 432.
1
2
311:32
411:32
511:32
611:32
7
811:32
9
10
11
12
1311:32
14
1511:32
1611:32
17
1811:32
1911:32
20
21
2211:33
2311:33
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 53 of 83 Page ID #:4255
54
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: 430, 431, 432.
MS. ELIOT: Yes, Your Honor.
THE COURT: All right. Thank you.
(Exhibits provided to the witness.)
THE COURT: Counsel, please continue.
BY MS. ELIOT:
Q. Do you recognize these exhibits?
A. Yes, I do.
Q. What are they?
A. These are the "product" that we went ahead and
reprocessed, establishing the hash on those products, to
make sure that the stored hash was the same as the computed
hash on products that you asked us to reprocess.
Q. Okay. And does each chart there contain a column with
a product ID number?
A. Yes, it does.
Q. Exhibit number and a date of applicable --
A. Yes, it does.
Q. And can you tell us what was the result of your review?
A. Yes. Each one of the products that were reprocessed,
the hash marks were compared and the hash values matched on
each product.
Q. Is the fact that the hash values matched reflected on
the chart marked as Exhibits 430, 431 and 432?
A. Yes, they are.11:34
111:33
211:33
311:33
411:33
511:33
611:33
711:33
811:33
911:33
1011:33
11
12
13
1411:33
15
1611:34
1711:34
1811:34
1911:34
2011:34
21
22
2311:34
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 54 of 83 Page ID #:4256
55
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. In addition to Facebook data, was your unit also
involved in the collection of data from a device in certain
cars in the course of this investigation?
A. Yes.
Q. Was that data collected pursuant to lawful court
process?
A. Yes.
Q. And do you understand that for purposes of your
testimony today, we have numbered a device and call it
Device No. 3?
A. Yes.
Q. Does DITU process data collected from a device in the
car in the same or different way it processes data from
Facebook?
A. Same way.
Q. And so in this case, did DITU assign a unique signature
or MD hash value to the data collected from Device 3?
A. Yes, we did.
Q. Did this data also get assigned a product ID number?
A. Yes, it did.
Q. Were you asked to review the data collected from
Device 3 in this case?
A. Yes, I was.
Q. And did you conduct that review with the assistance of
charts setting forth the product ID number and a
111:34
2
3
411:34
511:34
6
711:34
811:34
9
10
1111:35
1211:35
13
14
1511:35
1611:35
17
1811:35
1911:35
2011:35
2111:35
22
2311:35
2411:35
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 55 of 83 Page ID #:4257
56
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
corresponding government's exhibit number as well?
A. Yes, I did.
MS. ELIOT: If we could place before the witness
what has been marked as Government's Exhibit 843 and 844.
(Exhibits provided to the witness.)
BY MS. ELIOT:
Q. Do you recognize these exhibits?
A. Yes, I do.
Q. What are they generally?
A. These again are the products that you asked us to go
ahead and reprocess.
Q. And does each chart there contain a column with exhibit
number, product ID number, along with a date and a time?
A. Yes, it does.
Q. And when you conducted your review, can you tell us
what was the result?
A. Yes. We reprocessed -- the hash value was attached to
it, and the hash values matched.
Q. And the fact that the hash values matched, is that
indicated on your chart as well?
A. Yes, it is.
Q. And when a hash value does match, what does that mean
in terms of the integrity of the data?
A. It means that nothing within that packet was ever
changed.
1
211:35
311:35
4
511:36
611:36
711:36
811:36
911:36
1011:36
11
1211:36
13
1411:36
1511:36
16
1711:36
18
1911:36
20
2111:36
2211:36
23
2411:37
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 56 of 83 Page ID #:4258
57
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
For instance, if you are looking at an e-mail, if a
period within that e-mail had been changed, the hash value
would be completely different.
MS. ELIOT: I have nothing further, Your Honor.
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
MR. LENGYEL-LEAHU: No. Thank you, Your Honor.
THE COURT: Cross-examination, Ms. Corrigan.
MS. CORRIGAN: No, Your Honor.
THE COURT: Thank you, sir. You may step down.
We're going to place you on call.
(Witness steps down.)
THE COURT: Your next witness please, counsel.
MS. ELIOT: Your Honor, the government calls
Ms. Lena Grote.
THE COURT: Step forward, please, between the
double doors. Stop at that location and raise your right
hand, please.
LENA GROTE, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: I do.
THE COURT: Thank you. If you'll please be seated
to my left. The entrance to the jury box is closest to the
wall.
Would you state your full name to the jury, please,
and spell your last.
THE WITNESS: Lena Grote, G-R-O-T-E.11:38
111:37
2
3
411:37
511:37
611:37
711:37
811:37
911:37
10
1111:37
1211:37
1311:37
14
1511:37
16
17
1811:37
1911:38
2011:38
21
22
2311:38
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 57 of 83 Page ID #:4259
58
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: Thank you.
Direct examination by the government.
DIRECT EXAMINATION
BY MS. ELIOT:
Q. Good morning. What do you do for a living?
A. I'm an intelligence analyst.
Q. Who are you employed by?
A. CSRA.
Q. Is that a Homeland Security group?
A. Yes.
Q. How long have you been an intelligence analyst with
CSRA?
A. A little over three years.
Q. Where are you currently assigned?
A. I'm assigned at the OCIAC.
THE COURT: I'm sorry. Where?
THE WITNESS: The OCIAC.
BY MS. ELIOT:
Q. Is that O-C-I-A-C?
A. Yes.
Q. Can you tell the jury what that stands for?
A. Orange County Intelligence Assessment Center.
Q. What is your title at the Orange County Intelligence
Assessment Center?
A. I'm the lead tactical intelligence analyst.11:39
111:38
211:38
311:38
411:38
511:38
611:38
711:38
811:38
911:38
1011:38
1111:38
12
1311:38
1411:38
1511:38
1611:38
1711:38
1811:38
1911:38
2011:39
2111:39
2211:39
2311:39
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 58 of 83 Page ID #:4260
59
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. In general, what are your duties and responsibilities
as the lead technical intelligence analyst?
A. Um, conduct open source information and all source
collection of information supporting federal, state, and
local law enforcement.
Q. And when you say "open source," do you mean it's
information that is available to the public?
A. Yes.
Q. Where did you work prior to joining the Orange County
intelligence assessment center?
A. The Department of Homeland Security.
Q. And were there particular programs that you supported
at that time?
A. Yes. I supported the DHS tripwire program.
Q. Is that a bombing prevention program?
A. Yes.
Q. Did you support a -- another program at the Department
of Homeland Security?
A. Can you clarify exactly?
Q. Yes. Have you done any work supporting cyber strategy?
A. Yes. I supported the office of cyber and strategy for
DHS tripwire program.
Q. Turning to your education, what university did you
attend?
A. Indiana University Bloomington.11:40
111:39
2
311:39
4
5
611:39
7
811:39
911:39
10
1111:39
1211:39
13
1411:39
1511:39
1611:39
1711:39
18
1911:40
2011:40
2111:40
22
2311:40
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 59 of 83 Page ID #:4261
60
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. Did you earn a degree there?
A. Yes.
Q. What's that in?
A. Bachelor of arts in international studies in Arabic.
Q. Are you familiar with social media?
A. Yes.
Q. As an analyst, what types of social media do you
typically review?
A. Open publicly available, um, social media platforms
such as Google, Facebook, Instagram...
THE COURT: You're dropping your voice. I'm going
to ask you to pull that microphone a little closer. And
would you repeat your answer.
THE WITNESS: Um, types of social media, uh,
publicly available information such as Google, Facebook,
Instagram, Twitter.
BY MS. ELIOT:
Q. Have you had any training in Internet investigations or
investigations involving social media evidence?
A. Yes.
Q. What kinds of courses or training have you had?
A. I'm a certified social media security professional.
Q. And have you attended any trainings or courses prior to
getting certified?
A. Yes, I have. I have been in the DHS open source11:41
111:40
211:40
311:40
411:40
511:40
611:40
711:40
8
911:40
10
1111:40
12
13
1411:41
15
16
1711:41
1811:41
19
2011:41
2111:41
2211:41
2311:41
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 60 of 83 Page ID #:4262
61
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
investigations course in addition to the social media
security professional certification as well as other
additional, uh, online investigative courses.
Q. What does a certification as a social media security
professional mean in terms of knowledge?
A. Uh, it provides you with familiarity in, um,
understanding and knowledge of the platforms themselves, um,
the different types of information out there, um, and the
vulnerabilities within them.
Q. Did you have to take a test to become certified?
A. Yes.
Q. Did you serve as an instructor or provide training on
analyzing social media evidence in the course of
investigations?
A. I have, yes.
Q. What particular courses have you taught or will you be
teaching to antiterrorism investigators?
A. I have provided open source investigative courses to
federal, state, and local law enforcement professionals.
Q. And that's training in Internet investigations
generally?
A. Yes.
Q. Are you familiar with methods of preserving social
media evidence that appears online?
A. Yes, I am.11:43
1
2
3
411:42
5
611:42
7
8
9
1011:42
1111:42
1211:42
13
14
1511:42
1611:42
17
1811:42
19
2011:42
21
2211:42
2311:42
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 61 of 83 Page ID #:4263
62
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. In the course of your duties, do you use any particular
techniques to preserve evidence you see online?
A. Yes. I utilize various free applications that are out
there to, uh, just save information that's on pages.
Q. And have you used the application called "Snagit"
before?
THE COURT: I'm sorry. Counsel, what was that?
MS. ELIOT: I'm sorry.
Has she used the application called "Snagit,"
S-N-A-G-I-T.
THE WITNESS: Yes.
BY MS. ELIOT:
Q. Are you also familiar with FireShot screen capture?
A. Yes, I have used and am familiar with both.
Q. And is there a third program that you're familiar with
called "MHT"?
A. Yes.
Q. Starting with Snagit, can you explain what that program
captures or preserves?
A. Snagit is essentially just a preservation tool that you
can use to preserve information on a screen in various
formats. You can use it to preserve a photo or video or
anything that you have available on the screen in front of
you.
Q. What does FireShot screen capture preserve?11:44
111:43
2
311:43
4
511:43
6
711:43
811:43
911:43
10
1111:43
1211:43
1311:43
1411:43
1511:43
16
1711:43
1811:43
19
2011:43
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 62 of 83 Page ID #:4264
63
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Fireshot allows you to save the page in a PDF format,
so it puts it into a document where you can look at it
outside of the software itself. So it saves it sort of like
a page document where you don't have to see the browser or
software around it. Um, you just see it within the actual
sort of document itself.
Q. And what does MHT preserve?
A. MHT preserves -- it essentially archives a page, so it
will save it in a format where it will save all the videos
that were on a page, all the links that are on the page, all
the images on the page in a workable format, so if you
needed to play videos again, you know, it's not a static
image like a PDF capture or a picture saving.
Q. So that's -- essentially, a live Internet page is
captured?
A. Yes.
Q. Did you provide analytical assistance in this case?
A. I saved various pages off of the Internet, yes.
Q. What type of social media accounts did you -- or what
type of, um, social media did you save in this case?
A. Um, there were Twitter -- Twitter pages.
Q. And did you save Facebook as well?
A. I do not recall.
Q. We would now place before you what's been marked as
Government's Exhibits 203, 2010, and 2011, please.
111:44
2
3
4
5
6
711:44
811:44
9
10
11
12
13
1411:45
15
1611:45
1711:45
1811:45
1911:45
20
2111:45
2211:45
2311:45
2411:45
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 63 of 83 Page ID #:4265
64
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
(Exhibits provided to the witness.)
BY MS. ELIOT:
Q. Do you recognize these exhibits?
A. I only have two of the three. One second.
Yes, I do.
Q. And what are they?
A. These are Snagit screen captures of a Twitter page.
Q. And can you explain how you go about -- how someone
would go about preserving evidence with Snagit starting with
accessing a Twitter account?
A. Um, yes. You just go to the website and whatever is on
the page at the time, you load the page, and you, um --
utilizing the application that's an add-on onto your
browser, you just click "Snagit," and it essentially saves
what's on the page in front of you at the time.
Q. And where does it save the information to?
A. It saves it onto your computer.
Q. And at the Orange County Intelligence Assessment
Center, are the computers in a secure location?
A. Yes.
Q. Are the computer hard drives password-protected?
A. Yes.
Q. And did you have an opportunity to review these
exhibits and compare them to the original files that were
preserved?
111:45
211:46
311:46
411:46
511:46
611:46
711:46
811:46
9
10
1111:47
12
13
14
15
1611:47
1711:47
1811:47
19
2011:47
2111:47
2211:47
2311:47
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 64 of 83 Page ID #:4266
65
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes.
Q. Are the exhibits before you the same as the content on
the Twitter page that was preserved using Snagit?
A. Yes.
Q. And do these exhibits fairly and accurately depict what
the Twitter page looked like at the time the Twitter account
was accessed?
A. Yes, they do.
MS. ELIOT: If we could place before the witness
what has been marked as Government's Exhibits 204 and 212.
(Exhibits provided to the witness.)
BY MS. ELIOT:
Q. Now, were these exhibits captured using one of the
other programs that you mentioned earlier?
A. Yes. These were captured using FireShot screen capture
so the PDF version of a website-saving application.
Q. And in this case with the FireShot screen shot, is a
file again saved to your hard drive?
A. Yes, it is.
Q. And have you had the opportunity to review these
exhibits and compare them to the original files you
preserved?
A. Yes, I have.
Q. Are these exhibits before you the same as the data you
preserved using FireShot?
111:47
211:47
3
411:48
511:48
6
7
811:48
911:48
10
1111:48
1211:48
1311:48
14
1511:48
16
1711:48
18
1911:49
2011:49
21
22
2311:49
2411:49
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 65 of 83 Page ID #:4267
66
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes.
Q. And do the exhibits fairly and accurately depict what
the computer screen looked like at the time you preserved or
accessed the Twitter accounts?
A. Yes.
MS. ELIOT: If we can now place before the witness
what has been marked as Government's Exhibit 201.
(Exhibit provided to the witness.)
BY MS. ELIOT:
Q. And you do recognize this exhibit as well?
A. Yes, I do.
Q. And what is it?
A. This is a screen shot from a phone of an open Twitter
page.
Q. Does the exhibit fairly and accurately depict what the
Twitter account looked like at the time you accessed it by
phone?
A. Yes.
MS. ELIOT: We're now placing before the witness,
please, what has been marked as Government's Exhibits 205
through 208, and 213, please.
MR. LENGYEL-LEAHU: You said 205 through 208?
MS. ELIOT: Yes.
(Exhibits provided to the witness.)
THE COURT: Counsel.11:50
111:49
211:49
3
4
511:49
611:49
7
811:49
911:49
1011:49
1111:49
1211:49
1311:49
14
1511:50
16
17
1811:50
1911:50
20
21
2211:50
2311:50
2411:50
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 66 of 83 Page ID #:4268
67
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
BY MS. ELIOT:
Q. Do you recognize what method of capture was used to
preserve the documents that are marked as exhibits before
you?
A. Yes. These are a depiction of an MHT capture.
Q. And when you use MHT software to capture evidence, is
the file again saved to your hard drive?
A. Yes.
Q. Have you had an opportunity to review these exhibits
and compare them to the original files you preserved?
A. Yes.
Q. Are the exhibits before you the same as the data you
preserved using MHT software?
A. Yes.
Q. Do these exhibits fairly and accurately depict what the
Internet pages looked like at the time you accessed
particular Twitter accounts?
A. Yes, they do.
MS. ELIOT: No further questions, Your Honor.
THE COURT: Cross-examination, Mr. Lengyel-Leahu.
MR. LENGYEL-LEAHU: Could I approach, Your Honor?
THE COURT: You may.
(Counsel approaches the witness with documents.)
MR. LENGYEL-LEAHU: Let me take that back,
Your Honor. The government hasn't moved these exhibits into
111:51
211:51
3
4
511:51
611:51
7
811:51
911:51
10
1111:51
1211:51
13
1411:51
1511:51
16
17
1811:51
1911:51
2011:51
2111:51
2211:51
2311:52
2411:52
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 67 of 83 Page ID #:4269
68
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
evidence.
THE COURT: Not yet.
MS. ELIOT: No.
MR. LENGYEL-LEAHU: I think we can do it during
the lunch break.
No questions.
THE COURT: And, Counsel?
MS. CORRIGAN: No, Your Honor. Thank you.
THE COURT: If you would step down, please. I'm
going to ask you to remain over the lunch hour, though, out
in the hallway. Thank you very much.
Counsel, your next witness, please.
(Witness steps down.)
MS. ELIOT: Your Honor, the government calls
Special Agent Scott Wales.
THE COURT: Thank you, sir. If you'll stop at
that location and raise your right hand, please.
SCOTT CHRISTOPHER WALES, CALLED BY THE GOVERNMENT, SWORN
THE WITNESS: I do.
THE COURT: Sir, would you face the jury after
you're seated. Would you state your full name and spell
your last name, please.
THE WITNESS: My full name is Scott Christopher
Wales, and my last name is spelled W-A-L-E-S.
THE COURT: Thank you. 11:53
1
211:52
311:52
411:52
5
611:52
711:52
811:52
911:52
10
11
1211:52
1311:52
1411:52
15
1611:53
17
1811:53
1911:53
2011:53
21
22
2311:53
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 68 of 83 Page ID #:4270
69
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Direct examination by the government, please.
DIRECT EXAMINATION
BY MS. ELIOT:
Q. Good morning. What do you do for a living?
A. I'm a special agent with the Federal Bureau of
Investigation.
Q. How long have you been a special agent with the FBI?
A. I've been an agent for coming up on five years.
Q. In general, what are your duties and responsibilities
as a special agent?
A. So I'm assigned to a counterterrorism squad,
specifically the Joint Terrorism Task Force here in
Orange County, where we investigate mainly Sunni extremism
matters.
Q. Is the Joint Terrorism Task Force sometimes known as
JTTF?
A. Yes.
Q. And how long have you been assigned to the task force?
A. Same, four and a half years.
Q. Did you receive training when you first joined the FBI
in 2011?
A. I did.
Q. And where did that basic agent training take place?
A. In Quantico, Virginia.
Q. Can you briefly describe the general subject areas you11:54
111:53
211:53
311:53
411:53
511:53
6
711:53
811:53
911:53
10
1111:54
12
13
14
1511:54
16
1711:54
1811:54
1911:54
2011:54
21
2211:54
2311:54
2411:54
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 69 of 83 Page ID #:4271
70
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
covered at basic agent training?
A. Yes. So during the five to six months of training,
they cover many different areas for the special agent
position that include physical training, defensive tactics,
and then tactics for entering and making arrests in a home.
There's legal training, various other classroom trainings
that really cover the whole gamut of the violations that the
FBI investigates, from criminal matters to national security
matters, and there's firearms training as well.
Q. Have you had any training in counterterrorism?
A. I have.
Q. And what training programs have you attended, or what
training have you received?
A. I received basic training while at Quantico, Virginia,
in counterterrorism, and then once I came to the
Orange County office of the FBI, I was assigned to a
counterterrorism squad, where I received further training,
um, specific to just that violation. And that included
training on designated foreign terrorist organizations,
their idealogy, you know, their -- the geography of
terrorism, and the various threats that are related to those
organizations.
Q. And have you received any training regarding
terrorists' use of the Internet?
A. I have.11:56
1
211:54
3
4
5
6
7
8
9
1011:55
1111:55
1211:55
13
1411:55
15
16
17
18
19
20
21
22
2311:56
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 70 of 83 Page ID #:4272
71
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. And does that include mobile messaging apps training on
how those are used as well?
A. That's correct.
Q. Are you familiar with social media?
A. I am.
Q. And what do you understand the term "social media" to
mean?
A. Social media is a -- a -- uh, platforms available
online for people to connect to one another to share
information both to consume and to disseminate information
online.
Q. Have you attended training on Internet investigations
or on obtaining social media evidence?
A. I have.
Q. Okay. What training have you received?
A. I've received specific training on these various social
media platforms. Mainly, you know, there're a key few
platforms like Facebook, Twitter as well as mobile messaging
applications, um, that are commonly utilized for
communicating.
Q. Have you participated in investigations involving
evidence maintained by internet service providers?
A. I have.
Q. Do you provide training to other investigators?
A. Yes, I do.11:57
111:56
2
311:56
411:56
511:56
611:56
7
811:56
9
10
11
1211:56
13
1411:56
1511:56
1611:56
17
18
19
20
2111:57
22
2311:57
2411:57
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 71 of 83 Page ID #:4273
72
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Q. And what kind of training do you provide?
A. I specifically provide social media and mobile
messaging application training to other investigators and
how they can use various tools. Specifically involved with
furthering investigations related to social messaging and
mobile messaging applications.
Q. In this case, did you analyze various social media
accounts?
A. Yes.
Q. And what were the primary social media platforms that
you reviewed in this case?
A. Related to social media, Facebook and Twitter were the
main platforms.
Q. Can you --
A. And --
Q. I'm sorry. Go ahead.
A. And then in terms of mobile messaging applications,
there were multiple applications that were utilized. I --
the main ones being, um -- uh, there is WhatsApp is a mobile
messaging application that was utilized as well as surespot.
I think that those are the two main -- Skype. Those are --
those are the main ones.
Q. Can you briefly explain what Twitter is?
A. Yes. So for those that are not aware, Twitter is a
social media platform. It is a -- it is a community, a
111:57
211:57
3
4
5
6
711:57
8
911:57
1011:57
11
1211:57
13
1411:57
1511:57
1611:57
1711:57
18
19
20
21
22
2311:58
2411:58
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 72 of 83 Page ID #:4274
73
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
forum for people that can open their own accounts, and they
can post information on that account. They can follow other
people's accounts. So that's the social connection with
others. And they have the option to distribute their own
information or to also disseminate other's and consume it.
So they can follow other accounts, and they will get what's
called a "feed" on their own Twitter account that will
display the other information posted by the users they're
following.
Q. And is the information posted limited to a certain
number of characters?
A. Yes, it is.
Q. How many? Is it a long message or --
A. No, it's fairly short. On Twitter, they cap the total
field for each tweet at 140 characters.
Q. And you mentioned tweet. Is that what it's called?
That's what you referred to as a Twitter message?
A. Right. So a post, you know, what some refer to as a
post is called a tweet on Twitter.
Q. Can a Twitter user send a tweet from an iPhone or a
cellular device that has Internet service?
A. Yes.
Q. How is a Twitter account identified to other users?
A. Generally, through what is called a handle. And
Twitter uses the, um, "at" symbol, and then the handle will
1
2
3
4
5
6
7
8
9
1011:59
11
1211:59
1311:59
1411:59
15
1611:59
17
1811:59
19
2011:59
21
2211:59
2311:59
2412:00
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 73 of 83 Page ID #:4275
74
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
come after the "at" symbol, similar to what is in the middle
of an e-mail. You know, it's the name of your e-mail "at"
and then the provider. That "at" symbol is utilized for --
in front of the handle of their Twitter account.
Q. And if someone decides to follow someone else on
Twitter, are the Twitter communications of the person being
followed delivered automatically?
A. Yes. To -- I mentioned before, a feed. So when you
open up your account you, um -- it will open up to feed
which will include all of the tweets that were made by the
accounts that you're following.
Q. Does the account holder have to grant permission to
someone who wants to follow them?
A. Yes.
Q. How is a hashtag used in connection with Twitter?
A. Okay. So a hashtag is -- it's a way of categorizing or
almost like warehousing specific tweets by placing a
hashtag, or a pound symbol, in front of a phrase. And what
will happen is, if that pound sign is placed in front of the
phrase inside of a tweet, then you can go to that hashtag
site, and it will have all of the tweets that were sent out
that include that hashtag inside of it.
Q. In the course of your investigation, did you obtain
subscriber information for Twitter accounts used by
Defendant Nader Elhuzayel?
1
2
3
4
512:00
6
7
812:00
9
10
11
1212:00
13
1412:01
1512:01
1612:01
17
18
19
20
21
22
2312:01
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 74 of 83 Page ID #:4276
75
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
A. Yes, I did.
Q. What is subscriber information generally?
A. Subscriber information is identifiable information
related to the user of that account and when they set it up.
Oftentimes, it will include an e-mail address, phone number,
Internet protocol or IP address. And that's -- that's just
the general account information for the subscriber.
Q. For all Twitter subscriber records you obtained in this
case, did you do so pursuant to lawful court process?
A. Yes.
THE COURT: Would this be a convenient breaking
place?
MS. ELIOT: Certainly, Your Honor.
THE COURT: (To the jury:) We're going to send you
to lunch. I'm going to ask you to come back at 1:15.
You're admonished not to discuss this matter
amongst yourselves, nor form or express any opinion
concerning this case. Leave your notes, if you're taking
notes.
Remember this: Notes are only for your own use.
In other words, another juror should not be influenced by
the notes of another juror. And even your own independent
memory prevails over your notes.
I know a lot of courts don't allow rereading. This
is Debbie (indicating) and Deborah (indicating). They're
112:01
212:01
312:01
4
5
6
7
812:02
9
1012:02
1112:02
12
1312:02
1412:02
15
1612:02
17
18
19
2012:02
21
22
23
2412:02
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 75 of 83 Page ID #:4277
76
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
court reporters, and they're taking a record of these
proceedings. The problem is it's not an official record, so
we can't hand you back a transcript at the present time.
(Verbatim.)
But during your deliberations, if there's some
confusion or disagreement and you want a portion reread, we
can reread that back to you in open court. Okay? So we'll
always have a good record for you in case you miss something
or there's some concern or disagreement between you.
And you'll make that request if you get in to your
deliberations and you need that kind of information.
Go to lunch. We'll see you at 1:15.
(Jury recesses for lunch at 12:03 p.m.)
(Outside the presence of the jury.)
THE COURT: All right. Counsel, you started to
raise a concern over exhibits, and then you said we could
resolve it during the lunch hour. So we can use our lunch
hour for that. And what would you like to do?
MR. LENGYEL-LEAHU: My binder didn't have those
exhibits, and so I wanted to check and make sure that
they're what we've seen before. That's all.
THE COURT: What would you like the Court to do?
I'm confused.
MR. LENGYEL-LEAHU: I just wanted to check the
exhibits. I didn't get 'em in my binder from the
1
2
3
4
512:03
6
7
8
9
1012:03
11
1212:03
1312:03
1412:04
1512:04
16
17
18
1912:04
20
21
2212:05
23
2412:05
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 76 of 83 Page ID #:4278
77
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
government. I wanted to make sure what she was looking at
was what we've seen before.
THE COURT: Are you satisfied?
MR. LENGYEL-LEAHU: I think so.
Yes, I'm satisfied.
THE COURT: Okay. There are a number of exhibits.
And, just to retrace quickly, for all of your records, the
first agent was Special Agent Nicholas Vicencia, and these
exhibits were received: 1003, 606, 607, 608, 1001, 1002,
1004, 1005, 1007, 617, 618, and 619.
Does that comport with the records that the
government and the defense has?
MS. CORRIGAN: Yes, Your Honor.
MR. LENGYEL-LEAHU: That's what I have,
Your Honor.
THE COURT: Government.
MS. HEINZ: I'm sorry, Your Honor, did we -- did
you state 1004?
THE COURT: Yes.
MS. CORRIGAN: Yes.
MS. HEINZ: And 1003?
THE COURT: Yes. No, no. I said 1003, 606, 607,
608, 1001, 1002, 1004, 1005, 1006, 617, 618, and 619.
MS. CORRIGAN: I have 103 also (sic).
MS. HEINZ: I thought 1003 was --12:06
1
2
312:05
412:05
512:05
612:05
7
8
9
10
1112:06
12
1312:06
1412:06
15
1612:06
1712:06
18
1912:06
2012:06
2112:06
2212:06
23
2412:06
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 77 of 83 Page ID #:4279
78
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
THE COURT: I do too. That was the first one that
was received.
MS. CORRIGAN: Correct.
THE COURT: Let's do this again by the numbers.
1003.
MS. HEINZ: Yes.
THE COURT: I'm doing this sequentially, just as
you presented them.
MS. HEINZ: Yes, Your Honor.
THE COURT: 606, 607, 608, 1001, 1002, 1004, 1005,
1007, 617, 618, 619.
MS. HEINZ: Correct, Your Honor.
THE COURT: Those are all the exhibits that I have
in my notes. Now, remember, I'm taking notes, listening
looking at exhibits. I want to check, though: Is that an
accurate receipt of evidence?
MS. HEINZ: Yes, Your Honor.
MS. CORRIGAN: Yes, Your Honor.
THE COURT: Mr. Lengyel-Leahu?
MR. LENGYEL-LEAHU: Yes, Your Honor.
THE COURT: And Ms. Corrigan?
MS. CORRIGAN: It is.
THE COURT: There were no exhibits on
cross-examination.
The second witness, Mr. Hall (sic), 601 was12:07
112:06
2
312:06
412:06
512:06
612:06
712:06
8
912:06
1012:06
11
1212:07
1312:07
14
15
16
1712:07
1812:07
1912:07
2012:07
2112:07
2212:07
2312:07
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 78 of 83 Page ID #:4280
79
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
received. Any other exhibits that you offered?
MS. ELIOT: No, Your Honor.
THE COURT: Is that an accurate record?
Mr. Lengyel-Leahu?
MR. LENGYEL-LEAHU: Agreed, Your Honor.
THE COURT: Ms. Corrigan?
MS. CORRIGAN: Agreed.
THE COURT: The third witness was Tom Hom. He
referred to Exhibit 69. I do not have that received at the
present time.
MS. HEINZ: That's correct, Your Honor.
THE COURT: He referred to 617. Remember, I'm
taking that sequentially. That was previously received.
He referred for 148. I do not have that received.
MS. HEINZ: That is correct, Your Honor.
THE COURT: Any other exhibits that you presented
during his examination?
MS. HEINZ: No, Your Honor.
THE COURT: Mr. Lengyel-Leahu, is that accurate?
MR. LENGYEL-LEAHU: Yes, it is, Your Honor.
THE COURT: Ms. Corrigan?
MS. CORRIGAN: It is.
THE COURT: Exhibit (sic) No. 4, Abdalla Ahmed.
And he testified as to 1021, which I received.
Is that accurate, Counsel?12:08
1
212:07
312:07
4
512:07
612:07
712:07
812:08
9
10
1112:08
1212:08
13
1412:08
1512:08
1612:08
17
1812:08
1912:08
2012:08
2112:08
2212:08
2312:08
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 79 of 83 Page ID #:4281
80
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
MS. HEINZ: Yes, Your Honor.
THE COURT: Mr. Lengyel-Leahu?
MR. LENGYEL-LEAHU: That's accurate, Your Honor.
THE COURT: Mr.-- Ms. Corrigan?
MS. CORRIGAN: Yes.
THE COURT: The fifth witness was Agent Palmer.
There was a reference to 430, 431, 432. I've not received
any of those up to this time. There was an exhibit
concerning the car/vehicles at 843 and 844. I've not
received those nor have they been offered.
Is that accurate?
MS. ELIOT: That's correct.
MR. LENGYEL-LEAHU: That's correct, Your Honor.
THE COURT: Ms. Corrigan, is that accurate?
MS. CORRIGAN: It is.
THE COURT: The sixth witness was Lena Grote. And
she referred to the Snagit, 203, 210, 211. Those have not
been received by the Court.
She referred to 204 and 212, the conversations
captured by FireShot. Those have not been received by the
Court. They've not been offered.
201 was the screen shot from the Twitter page from
a phone. That has not been offered yet.
205, 206, 207, 208, and 213. Those have not been
offered yet. That's the MTH (sic) capture.
112:08
212:08
312:08
412:08
512:08
612:08
7
8
9
10
1112:09
1212:09
1312:09
1412:09
1512:09
1612:09
17
18
1912:09
20
21
2212:09
23
2412:09
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 80 of 83 Page ID #:4282
81
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
Is that an accurate record?
MS. ELIOT: That's accurate, Your Honor.
THE COURT: Mr. Lengyel-Leahu?
MR. LENGYEL-LEAHU: That's what I have,
Your Honor.
THE COURT: Ms. Corrigan?
MS. CORRIGAN: Yes.
THE COURT: The seventh witness was Scott Wales,
and so far he's referred to nothing.
MS. ELIOT: That's correct.
THE COURT: Okay. Now, we're going to do that at
the end of each day. We'll have an accurate record. I'm
gonna check along the way so we can keep up because there
may be a lot of exhibits. Okay?
Now, what else would you like to do with your lunch
hour?
MS. CORRIGAN: Eat.
MS. HEINZ: Eat.
THE COURT: Counsel?
MS. CORRIGAN: That's what I indicated is eat.
THE COURT: Would that be a good thing?
MR. LENGYEL-LEAHU: That'd be a great thing.
THE COURT: Why don't we go eat, then?
Then we're in recess.
MS. HEINZ: Your Honor, could the witness be12:10
112:09
212:09
312:09
412:09
5
612:09
712:09
812:09
9
1012:10
1112:10
12
13
14
1512:10
16
1712:10
1812:10
1912:10
2012:10
2112:10
2212:10
2312:10
2412:10
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 81 of 83 Page ID #:4283
82
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
excused?
THE COURT: You're coming back at 1:15.
THE WITNESS: Yes, Your Honor.
THE COURT: All right. At 1:15 you're to be
seated.
(Lunch recess held at 12:10 p.m.)
(Further proceedings reported by Deborah Parker
in Volume II.)
-oOo-
1
212:10
312:10
412:10
5
612:10
712:10
8
912:11
1012:11
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 82 of 83 Page ID #:4284
83
DEBBIE GALE, U.S. COURT REPORTER
8:15-CR-0060-DOC - 6/8/2016 - Day 2, Volume II
-oOo-
CERTIFICATE
I hereby certify that pursuant to Section 753,
Title 28, United States Code, the foregoing is a true and
correct transcript of the stenographically reported
proceedings held in the above-entitled matter and that the
transcript page format is in conformance with the
regulations of the Judicial Conference of the United States.
Date: March 23, 2017
/s/ Debbie Gale
_________________________________ DEBBIE GALE, U.S. COURT REPORTER CSR NO. 9472, RPR, CCRR
112:11
212:11
312:11
412:11
512:11
6
7
8
9
10
1112:11
1212:11
1312:11
1412:1112:11
1512:1112:11
1612:11
1712:11
18
19
20
21
22
23
24
25
Case 8:15-cr-00060-DOC Document 291 Filed 03/31/17 Page 83 of 83 Page ID #:4285