payment of co-conspirators and victims; and (4) store exploitative photographs for future sexual gratification. 37. Computer files or remnants of such files can be recovered months or even years after they have been created or saved on an electronic device such as the Subject Devices. Even when such files have been deleted, they can often be recovered, depending on how the hard drive has subsequently been used, months or years later with forensics tools. Thus, the ability to retrieve from information from the Subject Devices depends less on when the information was first created or saved than on a particular user's device configuration, storage capacity, and computer habits. 38. Based on the foregoing, I respectfully submit there is probable cause to believe that evidence of the Target Subjects' commission of the Subject Offenses is likely to be found on the Subject Devices. Procedures for Searching ESI A. Review of ESI 39. Law enforcement personnel (who may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) will review the ESI contained on the Subject Device for information responsive to the warrant. 40. In conducting this review, law enforcement may use various techniques to determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such techniques may include, for example: • surveying directories or folders and the individual files they contain (analogous to looking at the outside of a file cabinet for the markings it contains and opening a drawer believed to contain pertinent files); 21 2017.08.02 EFTA00247231