◆ SpookStack

‘ . pili INPORHATION CONTAINED S . + . v Qn 1S UNCLASSIFRED © (Rev. 01-31-2003) _ DATE Le-Le-2008 BY 60524 UC BAW/DR/RYS fe ae FEDERAL BUREAU OF INVESTIGATION Precedence: ROUTINE Date: 09/06/2006 To: Washington Field From: Washington Field Office be Amerithrax #3 bic Approved By: Drafted By: Case ID #: 279A-WE—222936-USAMRITD } (Pending) ~\SA"| Title: AMERITHRAX; MAJOR CASE 184 Synopsis: To memorialize the work performed on the electronic evidence collected on Bruce Edwards Ivins in relation to Major Case 184. Enclosure(s): One CD containing all files that were "bookmarked" during the review process. Details: During the course of the Amerithrax investigation, Bruce Edwards Ivins consented to having his home computer, two United States Army Medical Research Institute of Infectious Diseases (USAMRIID) workstations, various loose media items and his USAMRIID user directory copied for review by Amerithrax investigators. The abovementioned items were imaged by Washington Field Computer Analysis Response Team (CART) members. The imaged drives were given 1B numbers and were maintained as evidentiary items. The imaged drives were loaded onto a workstation maintained in the Amerithrax workspace located in the Northern Virginia Resident Agency. Once loaded onto the workstation, the im loaded into the software program scanned the imaged drives and categorized each file based on its type (i.e. email, document, spreadsheet, database, etc.). The files were then reviewed by the writer of this communication. Files that were deemed pertinent to the Amerithrax investigation were "bookmarked." Writer then exported all files that were bookmarked to a CD for review by other Amerithrax investigators. aor ~J DO b6é bic