4.Junella Uadan — Direct/Cross/Redirect
361 linesTHE COURT: State, you may call your next witness.
JUNELLA UADAN
being called as a witness, and having first been duly sworn,
testified as follows:
JUNELLA UADAN: I do.
COURT CLERK: Thank you.
THE COURT: Ma'am, good morning. If you could take a seat. State your name and spell it for the record, please.
JUNELLA UADAN: First name is Junella, J-u-n-e-l-l-a. Last name is Uadan, U-a-d, as in delta, a-n.
THE COURT: You may proceed, sir.
DIRECT EXAMINATION
BY MR. JAY:
JUNELLA UADAN: I'm currently employed with the Orange County Sheriff's Office here in Orlando, Florida.
JUNELLA UADAN: Currently, my current position is a digital forensic examiner.
JUNELLA UADAN: I just hit six years.
MR. JAY: And can you tell us about -- and we're going to break it down -- education, training, and experience. Let's just talk about your education. What's your educational background prior to becoming a law enforcement officer? In particular, what is relevant to being a digital forensic examiner?
JUNELLA UADAN: I actually started in crime scene investigations with the sheriff's office, so I have a bachelor's in forensic science through the University of Central Florida. Upon transferring over to our digital forensics unit, I became a certified computer forensic examiner through the International Association of Computer Investigative Specialists.
JUNELLA UADAN: IACIS, yes.
JUNELLA UADAN: Yes. Umm...
JUNELLA UADAN: IACIS.
JUNELLA UADAN: Yes.
MR. JAY: All right. So IACIS.
Tell us about that program that you went through with IACIS to become a digital forensics examiner.
JUNELLA UADAN: Yes. The beginning portion of it is in-classroom training. It's normally only hosted in two different locations around the world, one being here in Orlando, the other one normally being somewhere over in Europe. They actually just expanded a third location over in Australia.
So, again, the first two weeks are in-classroom training, normally with over 300 other students. And then the next five to six months are all a peer review type training where they give you problem sets on how to -- it goes from basic education on computer forensics to how to recover data. It could be pictures. It could be videos. You're not sure until you pass one step to move on to the next one to figure out what you're -- essentially, what kind of questions you're going to get.
MR. JAY: All right. We'll take a break from the education, training, and experience for one second.
On February 23rd, 2020, were you called out to a scene?
JUNELLA UADAN: Yes.
MR. JAY: And does that happen from time to time as a digital forensic examiner, as opposed to your previous duties, like a CSI, with which you would always go to the scene?
JUNELLA UADAN: Yes. As a digital forensic examiner, we are required to come out on scenes, if requested.
THE COURT: You may.
BY MR. JAY:
JUNELLA UADAN: Yes.
JUNELLA UADAN: I recognize the front label or the portion filled out on the envelope with my handwriting, as well as evidence tape sealed, also initialed with my initials.
MR. JAY: And the information on it includes, like, your case number and some of the other information that you just answered?
JUNELLA UADAN: Yes. Case number, date of collection, and the item description.
JUNELLA UADAN: An Apple iPhone model XS with a pink case.
MR. JAY: All right. And if I am not incorrect, I believe there's two sets of evidence tape on that item?
JUNELLA UADAN: Yes.
JUNELLA UADAN: The first set, which is the red tape here, initially when I collect -- or sometimes when we receive items from crime scene investigators, the packaging necessarily doesn't have to be sealed, just because the phone might have to be kept charge on prior to us receiving the phone.
So in this case, I did collect the item from the residence. I brought it back to our office. And then once I was done with my exam, it later gets sealed, again, with my initials and dates. And if there's, later on, an evidence review or somebody needs to review the item again, if we need to do an additional examination, the package might be reopened and then resealed again, hence the blue tape here at the bottom.
MR. JAY: All right. Other than the blue tape, is that item and the packaging substantially in the same condition when you were done examining what is said to be contained inside?
JUNELLA UADAN: Yes.
THE COURT: You may.
BY MR. JAY:
MR. JAY: If you would, would you open up this package and, without showing it to the jury at this point, see if you recognize what's inside of the envelope?
JUNELLA UADAN: (Complies.)
Yes. There's a phone with a pink case inside.
MR. JAY: Do you recognize that as the item that you collected from the scene that you went to on February 23rd, 2020, and then later examined?
JUNELLA UADAN: Yes.
JUNELLA UADAN: I believe it's 4740 -- or can I refer to my report for the address or the numerical?
JUNELLA UADAN: Yes.
MR. JAY: -- go ahead. And then when you're done refreshing your memory, let us know if your memory was refreshed.
JUNELLA UADAN: Yes.
JUNELLA UADAN: Yes.
JUNELLA UADAN: 4748 Frantz, I'm not sure if I'm saying that correct, Court, No. -- Apartment No. 3.
MR. JAY: Now, I know you work for the sheriff's office in Orange County, but I still need to ask. Was this in Orange County, Florida?
JUNELLA UADAN: Yes.
THE COURT: Any objections?
MR. OWENS: No objection.
THE COURT: What was premarked as E will be received into evidence without objection as State's 16.
(State's Exhibit No. 16 was received in evidence.)
BY MR. JAY:
JUNELLA UADAN: Yes.
JUNELLA UADAN: I was requested to come out. I was informed from the detectives that the user of the device gave consent for us to download her phone, so I responded out. And once I located the phone, I immediately started to extract the data from the phone.
MR. JAY: All right. So now let's talk about what tools you used to do that. I assume there's some software involved with this process?
JUNELLA UADAN: Yes.
MR. JAY: Can you tell us about your familiarity and the training that you had in regards to using that software back in the time of February 2020?
JUNELLA UADAN: Yes. One of the main tools that we use for data extraction is called Cellebrite. I did obtain -- again, transitioning to our digital forensics unit, I obtained two certificates with Cellebrite, which is an operator certificate, knowing how to operate the hardware and the extraction software, as well as a certificate in their Physical Analyzer software, which is more used for the analysis part.
So once we download the phone, we get the digital file, which, to us, is a lot of data, which humans, we can't read, so their software basically makes it more readable for us humans, which we can then generate a report in different formats for review. So in this case, we used Cellebrite.
They actually started to develop software for cell phone companies -- so if you remember back in the day when you went to go upgrade your phone and you had to go into a brick and mortar store, they actually had the software to help transfer your old data from your old phone and transfer it to your new phone, like, your contacts, your pictures, your videos, a lot of the data that you didn't want to lose when upgrading, upgrading your phones. But they are now a predominantly digital forensics company and they provide the software that we use to extract data off of digital devices.
JUNELLA UADAN: Yes.
JUNELLA UADAN: Yes. In this case -- and especially at that time, we have -- we had two options. There was a portable tablet. In this case, I used a -- you can still use a computer, and they have sister software that mirrors the exact same software that's on the portable tablet.
So in this case, I had my call-out laptop with the extraction software installed on it. And just like you would to connect your phone to, let's say, your computer to export photos or take photos off of your phone if you want to save them, we're doing, essentially, the exact same thing in the field where we're connecting it to our computer and we're letting the software pull all that data or the contents off of that phone.
MR. JAY: When you were told that you had Ms. Boone's password to her phone device, do you do anything to try and make sure that the data cannot be manipulated or destroyed from the outside world?
JUNELLA UADAN: Yes. It's standard protocol, like, once we receive a phone -- hopefully somebody did it before it's handed to us, but, again, if we're responding out to the scene or if we're the only ones that are interacting with the phone, we for sure try to -- if we are given a passcode, we try to confirm the passcode, and then the phone is immediately put into airplane mode, which will disconnect it from any outside network. And we also try to ensure -- because not always -- once you place your phone into airplane mode, it doesn't always turn off your Bluetooth and/or Wi-Fi connections, so we may go in and make sure that those settings are also disabled before we extract the data.
MR. JAY: All right. Take us through this extraction process. I understand that there are many different levels of information that you can get depending on a lot of things that you'll tell us about.
Can you tell us the level of extraction you were able to do on site with this cellular phone device?
JUNELLA UADAN: Yes. For this specific phone, we were trying to minimally get the user data, again, the stuff that you guys can see when you're looking through your phone; your calls, your messages, your pictures, your videos. And in this case, that's the level of support that the -- the on-scene software that we're able to use is able to download from the phone, especially with having a password or passcode.
MR. JAY: All right. So I think we're all familiar with Windows. I think Mac has its own special iOS operating system as well. Can you tell us about the operating system that was on this particular cellular phone device?
JUNELLA UADAN: Yes. Apple has its own operating system, iOS, if you have an iPhone. And, of course, even if you have Android or Apple, you're constantly getting notifications Saying it's time to update your phone to the newer software. So in this case, it's an iPhone, so it's running in their shortened version of iOS.
MR. JAY: Can you also extract data that has been, quote-unquote, deleted from the operating system and can you just tell us all about that?
JUNELLA UADAN: Yes. It is sometimes a possibility. It's not always guaranteed, but we sometimes have more advanced tools that can pull -- potentially pull that data from the device. And then later, once we get that download, we can put it into that software and normally would give us indications on whether or not data has been deleted.
MR. JAY: And so if a particular photograph or a Word document or some sort of file has been deleted from the operating system, may it still remain on the phone device or computer device?
JUNELLA UADAN: Yes.
JUNELLA UADAN: That is the hope. Again, not always guaranteed, but, again, that's why we're trained to go in there and look for that -- the data behind the scenes to see if we can recover those artifacts, yes.
JUNELLA UADAN: Yes.
MR. JAY: And tell us, if it is different in any way, how your software or hardware was different in doing it at the office.
JUNELLA UADAN: Yes. In this case, the -- we used, again, a more advanced tool, which is able to capture -- the technical term is a full file system. So we're capturing that whole filing cabinet, you would say, of the data stored on the phone with, again, the probability to not only collect possibly deleted data, but also your systems information, application data, like, your social media, messaging apps. Everything aside from your normal user data, like, again, like, your calls and messages and pictures and videos.
MR. JAY: And what level of capture -- and if you answered it, I'm sorry. What level of capture were you able to do?
JUNELLA UADAN: Again, in this case, I was able to do the full file system back at the office. On scene, it's -- the technical term is an advanced logical or logical extraction, again, which encompasses your generic user data on your phone.
MR. JAY: And the level of extraction you did at the office, does that encompass data that is outside of the operating system or in unallocated space?
JUNELLA UADAN: It could include that data, yes.
MR. JAY: Okay. Now, what kind of information can be generated by this computer software tool that you used to make it presentable for humans, such as yourself or the members of the jury, to review?
JUNELLA UADAN: Yeah. In the software, it will place the data in data categories, so it's organized. We can -- if we just want to search between messages, we can go in the messages category. If we want to look at logs, like, maybe data that your phone is recording, like, locations, app activity, that's also presented in its own data category. And it also has the ability to put all that data in chronological order in a -- what they refer to as a timeline. So we can also see all that ongoing data in the timeline section. And if we need to, we can either narrow down to a small scope of time or, if it's requested, we can get the whole -- all the data all in that timeline to whoever wants to review it.
MR. JAY: And, for instance, if there's an entry in the timeline that says, you know, April lst, 2016, photograph A, B, C was taken, are there separate folders that are generated by this software tool that has all the images, such as that still photograph, generated?
JUNELLA UADAN: Yes. When we export it or generate, like, ina PDF version of that report, all that data is categorized in a PDF, but it also exports a copy of that same data, such as images and videos, in separate subfolders. So if I just wanted to go look at the pictures from the phone directly, I can just go into that subfolder and just look at all thousands of images that might be exported from the phone.
MR. JAY: Okay. And is there identifying information, such as an IMEI, that is generated by the software tool, and can you tell us what these things are?
JUNELLA UADAN: Yes. The IMEI is one identifier that your cell phone has to help authenticate it to your cell phone network. It also is, like, a serial number unique to your phone. And in this case, our software is able to read and report all those device identifiers from your phone, including an IMEI.
MR. JAY: And do you take actual photographs of the cellular phone device, like the exhibit we just put into evidence, to document it before or after you do the extraction?
JUNELLA UADAN: Yes. Just like in crime scene, a cell phone, digital evidence, is essentially another form of evidence, so we always try to document the current state, condition, whether it's locked, unlocked. And if we -- again, in this case, we were provided a passcode, so I normally like to photographically document the phone's identifiers or accounts that may be logged in -- logged into the phone.
MR. JAY: Prior to trial, were you asked to look at two different exhibits to see if they represented a portion of that timeline you described that can be put into the PDF report form, as well as some of the images and videos from this extraction that you performed on the device that's in evidence?
JUNELLA UADAN: Yes.
THE COURT: You may.
BY MR. JAY:
MR. JAY: What I'm showing you first is O for identification. Did you have an opportunity to review that this morning to make sure that the portion of the PDF and the images in a separate folder there were part of the extraction that you did on this device that we're talking about?
JUNELLA UADAN: Yes.
JUNELLA UADAN: Yes.
MR. JAY: P for identification, is that another carve-out of the PDF timeline, as well as videos and photographs from that device?
JUNELLA UADAN: Yes.
MR. JAY: Your Honor, at this time the State will move O for identification into evidence and reserve on P.
THE COURT: With regard to State's 0?
MR. OWENS: No objection.
THE COURT: All right. What was premarked as State's O will be received into evidence without objection as State's 17.
(State's Exhibit No. 17 was received in evidence.)
THE COURT: You may.
BY MR. JAY:
MR. JAY: Opening up the file labeled extraction --
I guess we don't get that monitor. All right. So, sorry about your neck.
Looking at entry 31079, can we just go column through column and explain what we're looking at?
JUNELLA UADAN: Yes.
The first column normally is just an assigned number, just, like, a line item number for the report because, again, this is an excerpt. There could be thousands and thousands of line items when you're looking at the entire timeline.
So the far left-hand column is just a line item number, followed by, again, the data category for whatever data you're looking at. In this case, there's a couple listed as application usage and then location data.
MR. JAY: Let's talk about the column that has dates and times, and can you explain to us what UTC minus 5 means?
JUNELLA UADAN: Yes. Another column, again, we're putting -- looking at this in a timeline, so we want to know dates and times, so we'll include the date and time of the data that was recorded onto the phone. And this report was adjusted for our local Eastern Standard Time here in Orlando, Florida, so UTC negative 5.
MR. JAY: And going up to the top line there, 31075, that indicates that there's a start time for the application com.apple.camera, and then going back to our original one, 31079, that's the end time. Can you tell us what that means?
JUNELLA UADAN: Yes. So Apple is very good about recording activity on the -- directly from your device. When you open up a certain application, such as the camera, Apple is making note that you -- in this case, it's indicating a start time, so you opened up your camera at 10:21:36 p.m. And then you stopped using it, maybe closed it out or stopped recording, at 10:21:38 p.m.
MR. JAY: And in this portion of the PDF timeline, there does not appear to have been any videos or photographs captured while the camera was open; is that accurate?
JUNELLA UADAN: Based on that excerpt, I don't see a recorded media file.
MR. JAY: All right. In the surrounding entries, can we just talk about what I would unfairly probably call spam of locations? What is going on there?
JUNELLA UADAN: Again, if there's usage, application usage, or you're just in a really good location or your device is just set to record locations wherever you are, your phone is also recording that data as well. And in some cases -- like, again, your phone, if you have it set for your camera to record your location when you take a picture, again, like, when you reopen that picture, it will show you, hey, you were located at, you know, 2500 West Colonial Drive. That's that data that's being recorded in the background while you're using that application, and it might have that permission to record that data.
MR. JAY: Can we just go column by column through the first entry here, 16498. What does instant messages mean?
JUNELLA UADAN: That's referencing text messages.
JUNELLA UADAN: Yeah. So it'll reflect outgoing or incoming depending on recipient or sender.
JUNELLA UADAN: That might just be, like, one entry, one message. I don't see the header for the column, so that one, I'm not -- unsure of.
MR. JAY: All right. And the date and time we've already explained. Let's talk about the "from (owner)" and then the "participants." What does this all mean?
JUNELLA UADAN: So the "from" section, again, if we're looking at the first row of data, it's indicative as a text message because the sender -- it's listing the phone number being used to send that message. And then for iPhone devices specifically, if you're communicating with another Apple device, it may also list the phone number, as well as your backup, which is your Apple ID. So if it can't transmit that message through your phone number, it might default to your iCloud account. And in this case, it's listing both.
MR. JAY: All right. And if, for instance, the outgoing recipient or the incoming sender of the text message is in the contacts, would it show up with the person's name, such as Juancho?
JUNELLA UADAN: Yes. Our software will display your contact name as how you save it.
JUNELLA UADAN: Phone number or, again, Apple -- your iCloud account.
JUNELLA UADAN: So that is when the video -- in this case, it looks like a video -- is captured on the device.
MR. JAY: Let's specifically talk about entry 16520. Again, we've discussed that's an instant message, and it's incoming rather than outgoing, so that means it came to this phone device?
JUNELLA UADAN: Yes.
MR. JAY: And over to the right of the date and time, which would have been 6:07 p.m., 30 seconds, on Christmas 2019, it indicates that it's from a contact named Moe; is that accurate?
JUNELLA UADAN: Yes.
MR. JAY: And then the contents speak for itself.
Going down to 16522, an outgoing instant message at 11:31 p.m., 57 seconds, on Christmas 2019, what is the content of that communication?
JUNELLA UADAN: The content of the message is: "Hide and seek. I shall."
MR. JAY: Turning down to 17167, it's an instant message that indicates it's outgoing from this device on January 13th, 2020, 5:01 p.m., 41 seconds, and it's from what is -- (owner). Does that mean it's from the device?
JUNELLA UADAN: Yes.
JUNELLA UADAN: I'm sorry, what was the line item number?
JUNELLA UADAN: "And bless you and all of you too. I'll get rid of him."
MR. JAY: And then the next three are also outgoing messages. What do they indicate as far as content?
JUNELLA UADAN: Starting with 17168: "Then I'll be better." Followed by 17169: "Ugh." And 17170: "Torres."
MR. JAY: Turning now to entry 31103, which is on page 49 of the 59-page PDF, again, it looks like what we talked about before, the com.apple.camera application gets opened up to be used at 11:12 p.m., 40 seconds. Is that what this data reflects?
JUNELLA UADAN: Yes.
MR. JAY: And then at entry 31107, a video that ends up being captured as img 1062.mov begins at 11:12 p.m., 45 seconds, on February 23rd, 2020; is that accurate?
JUNELLA UADAN: Yes.
MR. JAY: And then there does not seem to be any intervening closing of the camera application before we get to 31113?
JUNELLA UADAN: In that portion, I don't -- I don't see that information.
MR. JAY: And then at 11:23 p.m., 03 seconds, on February 23rd, 2020, on entry 31113, a second movie is generated by this device labeled img 1063.mov?
JUNELLA UADAN: Yes.
(Video played.)
AUDIO RECORDING: Sarah. For everything you've done to me. Sarah. For everything you've done to me. Sarah. Fuck you. Sarah. Fuck you. Sarah. Stupid. Sarah. That's my name, don't wear it out. Sarah, I can't fucking breathe, baby, seriously. Yeah, that's what you do when you choke me. Sarah. Sarah. Sarah. Sarah, I can't breathe, babe. That's on you. Sarah, I can't breathe. That's on you. Sarah. (Unintelligible) extra (unintelligible). Sarah. (Unintelligible.) Sarah. Sarah, I can't -- I can't breathe, baby. Oh, that's how I feel when you cheat on me. Sarah. Fuck you. I can't fucking breathe, Sarah. Yeah. You should probably shut the fuck up. Sarah. Shh.
(Video stopped.)
(Video played.)
AUDIO RECORDING: Sarah.
(Video stopped.)
THE COURT: Any cross-examination?
CROSS-EXAMINATION
BY MR. HENDERSON:
MR. HENDERSON: Good afternoon, ma'am.
JUNELLA UADAN: Good afternoon.
MR. HENDERSON: I believe you stated on direct that you were called to the scene and you were asked to do your analysis out there; is that correct?
JUNELLA UADAN: At least a download.
MR. HENDERSON: A download.
What type of phone was this?
JUNELLA UADAN: An Apple iPhone XS.
MR. HENDERSON: Okay. And how were you able to get into the phone, for lack of a better word?
JUNELLA UADAN: I was provided with the phone's passcode.
MR. HENDERSON: Okay. With an Apple phone, without being given that passcode, are you able to get in an Apple phone?
JUNELLA UADAN: Maybe not necessarily unlock the phone, even though that is an option through some of our advanced tools that is supported, but it can have the ability to download the phone even in a locked state and pull 80, 85 percent of that data.
MR. HENDERSON: Okay. Is it a much easier process when you have the code?
JUNELLA UADAN: It's quicker, yes.
MR. HENDERSON: And how were you provided that code?
JUNELLA UADAN: I believe either through Detective Koepsell, or Connolly at the time, or I may have asked Ms. Boone just to reconfirm the passcode.
MR. HENDERSON: Okay. And did she give you the passcode?
JUNELLA UADAN: Yeah. Somebody did, yes.
MR. HENDERSON: Now, on the first exhibit that went up -- or when you were talking about the communications or the identifying factors of the phone, one of the things that were identified is dates and times; is that correct?
JUNELLA UADAN: Yes.
MR. HENDERSON: All right. Also, you said it would tell you if the source was incoming or outgoing; is that correct?
JUNELLA UADAN: Yes.
MR. HENDERSON: All right. And then you said it would identify -- it could identify either by phone number or name; is that correct?
JUNELLA UADAN: Yes.
MR. HENDERSON: All right. On the examples that you gave us, who was the identifying name as to the outgoing on this phone?
JUNELLA UADAN: I'm sorry, can you repeat the question?
MR. HENDERSON: Who was the identifying name for the outgoing texts or calls on this phone?
JUNELLA UADAN: I think in some of the line items that were shown above, it was just listed as a phone, a phone number.
MR. HENDERSON: Okay. Was there ever a name listed?
JUNELLA UADAN: A physical name? Possibly in other line items, but in -- in, again, those excerpts, it's just by phone number.
MR. HENDERSON: Okay. Did you ever see the name Brian Boone?
JUNELLA UADAN: Yes.
MR. HENDERSON: Okay. Where did you see the name Brian Boone?
JUNELLA UADAN: I believe in one of the iCloud -- or accounts that was logged into the phone, there was an associated e-mail address.
MR. HENDERSON: Okay. On any -- taking that, was there any other place where you were seeing a different name as to the outgoing, other than Brian Boone?
JUNELLA UADAN: Again, there -- there might have been other names listed in other portions of it, but, again, in those excerpts, it was just either by phone number or, again, with the Apple iPhone listing the iCloud account.
MR. HENDERSON: All right. Do you have a copy of the exhibit up there?
JUNELLA UADAN: No, not -- not on me.
MR. HENDERSON: Can we get that pulled up, please?
BY MR. HENDERSON:
MR. HENDERSON: Are you able to see that?
JUNELLA UADAN: No. This monitor is --
MR. HENDERSON: Oh, that screen doesn't work?
JUNELLA UADAN: This monitor is not working.
MR. HENDERSON: May we approach?
THE COURT: Yes.
(At the bench.)
THE COURT: Yes, sir?
MR. HENDERSON: Judge, I don't know how to pull it up. If someone on our laptop -- that's not what's been introduced into evidence. I can take the laptop up there and ask her if that helps refresh her memory as to that thing that way or the State can pull the exhibit back up because it's been introduced into evidence.
THE COURT: Okay.
MR. HENDERSON: Well, okay.
THE COURT: All right.
MR. HENDERSON: Thank you. That's fine.
THE COURT: All right.
MR. HENDERSON: I just wanted --
THE COURT: Okay. Let's pull it up and then you can utilize what's been placed into evidence. Thank you.
(In open court.)
THE COURT: Yes.
(At the bench.)
THE COURT: Yes, sir?
MR. JAY: Prior to trial, I had sent them what was going to be part of the State's case in chief, this carve-out. This carve-out only includes December 25th, 2019, and then a conversation that's between January 12th and January 13th of 2020, and then the entries made by the phone device on 2/23/20, the date of the murder. They're asking me to publish portions of things that are on our rebuttal disk that has not been entered into evidence at this time and will not be entered into evidence at this time unless and until they put on a self-defense claim.
THE COURT: Response?
MR. HENDERSON: December 25 of 2019 was not introduced?
MR. JAY: What was on this exhibit that is in evidence was 12/25/2019, some entries from there. We published those to the jury. And then we also went through some of the texts and the conversation between January 12th and January 13th of 2020. And then we have the entries from the point in time where it appears the owner of the device began using the device at about 9:42 in the morning on February 23rd, 2020, through the events, you know, that we're here discussing the last page, the two movies.
What he was asking me at sidebar was about something from an earlier date in 2019, or was it Christmas?
MR. HENDERSON: No. I said 12/25/2019.
THE COURT: Okay.
THE COURT: All right. Thank you.
(In open court.)
BY MR. HENDERSON:
MR. HENDERSON: Ma'am, are you able to see that?
JUNELLA UADAN: Yes.
MR. HENDERSON: There's an entry on 12/25/2019; is that correct?
JUNELLA UADAN: Are you referencing, like, the instant -- the instant message row?
MR. HENDERSON: Yes, ma'am.
JUNELLA UADAN: Yes, yes.
MR. HENDERSON: All right. Does it -- as far as participants, what does that show you? What does it tell you?
JUNELLA UADAN: So it's listing the owner in reference to the -- we'll say the first phone number, 8684. It's referencing that phone number, as well as the Gmail account or iCloud account associated with the phone, and then it's listing a physical name, a Brian, Brian Boone.
MR. HENDERSON: Okay. So it's showing Brian Boone as being the owner of the phone; is that correct?
JUNELLA UADAN: For that phone number and/or one of the participants in that message conversation.
MR. HENDERSON: Okay. Have you -- did you recall seeing any other -- any other name associated with that phone number, other than Brian Boone?
JUNELLA UADAN: I'm not sure I'm understanding the -- the question.
MR. HENDERSON: All right. When you did the analysis of this and you would look for the participants and get that information, match it up with the phone number, then in certain cases they will show you the owner name, because you said Apple is very detailed in some of their --
JUNELLA UADAN: Yes.
MR. HENDERSON: -- applications, so would you -- did you ever see another name associated with this account, other than Brian Boone?
JUNELLA UADAN: There was another iCloud account logged in on the physical phone.
MR. HENDERSON: Okay.
JUNELLA UADAN: But there was no, like, name -- name attached.
MR. HENDERSON: There was no name attached?
Okay. Now, when you -- when you're identifying these sources as being either outgoing or incoming sources, and is that basically telling you what device is being used?
JUNELLA UADAN: No. It's not indicative of a specific device, other than we know outgoing, the -- obviously, the source is the -- the phone that we extracted that data from. In incoming messages, it does not let us know if it -- if the message was made through a Samsung Galaxy or another iPhone.
MR. HENDERSON: Okay. What identifying information do you get at that time?
JUNELLA UADAN: In regards to, like, receiving a message?
MR. HENDERSON: Yes.
JUNELLA UADAN: In this case, or what's displayed there, it's gonna give us the content of the message. It's gonna give us the date and time that the message was sent or received. And, again, like in your phone, it does depict, either through a small notification, arrows indicating ingoing or outgoing. So it's just displaying that version in text up there.
MR. HENDERSON: Okay. And then from there, it's basically telling you the number that it came from; is that correct?
JUNELLA UADAN: Yes. Like, in reference to that top row, it's saying that that message came from that phone number, again, the top line, item -- last four digits is 8684, and then it's also listing the message participants.
MR. HENDERSON: It's not telling you the person who sent the message, is it?
JUNELLA UADAN: Correct. Just the -- just that it's originating from a phone number.
MR. HENDERSON: So if two people or more people had access to a phone, you wouldn't -- from this information, you wouldn't be able to tell who actually sent the message on any given time; is that correct?
JUNELLA UADAN: No. I'm not a fly on the wall and I can't see who's physically typing out messages.
MR. HENDERSON: Thank you, ma'am.
No further questions.
THE COURT: Any redirect examination?
REDIRECT EXAMINATION
BY MR. JAY:
JUNELLA UADAN: Yes.
MR. JAY: And if photographs or videos are taken during these conversations, that could be indicative of who was behind the phone device as well?
JUNELLA UADAN: Based on sound and visuals, that -- it is a -- it does help.
THE COURT: Can this witness be released?
MR. HENDERSON: Yes, Your Honor.
THE COURT: All right. Ma'am, you're released. Thank you very much.
JUNELLA UADAN: Thank you.
(Witness excused.)
THE COURT: State, any other witnesses or evidence to call at this time?
THE COURT: Okay. All right. Members of our jury, it is 12:21. At this point in time, we're going to go ahead and take our lunch break. I'm going to ask you to report back here at 2:00 at 12A at the Orange County Courthouse.
I'm going to give you a similar instruction, and same instruction I read to you last week.
Jurors, you must not conduct any investigation on your own. This includes reading newspapers, watching television, or using a computer, cell phone, the internet, any electronic device, or any other means at all to get information related to this case or the people and places involved in this case. This applies whether you are in the courthouse, at home, or anywhere else. You must not visit places mentioned in the trial or use the internet to look at maps or pictures to see any place discussed during the trial. Jurors, do not watch local news or read local newspapers. Jurors must not have discussions of any sort with friends, family members, or even your fellow jurors about the case or the people and places involved, so do not let anyone make comments to you or ask questions about the trial.
I want to stress again that just as you must not talk about this case face-to-face, you must not talk about this case by using an electronic device. You must not use phones, computers, or other electronic devices to communicate. Do not send or accept any messages related to this case or your jury service. Do not discuss this case or ask for advice by any means at all, including posting information on an internet website, chat room, or blog.
With that, members of the jury, we'll be in recess. We'll see you back here at 2:00 this afternoon. I thank you for your time.
COURT STAFF: Jury exiting.
(Jury exits.)
THE COURT: You-all can be seated. Thank you.
State, anything we need to address before we adjourn for the lunch hour?
MR. CACCIATORE: Your Honor, just briefly. As far as the scheduling of events this afternoon, the next witness we would be intending on calling would be Detective Koepsell; Koepsell, I apologize. Just the publication of the interviews in this case would be approximately three hours in length, not to mention any direct testimony and cross-examination testimony, so that's likely to take us beyond the 5:00 hour. I don't know if we can work late to accomplish it all.
THE COURT: I'm inclined to work late. It's just if they're on board with that.
MR. CACCIATORE: Okay.
THE COURT: If we need to go after 5:00 due to that presentation, we can. How long do you anticipate going, if you had to ballpark it?
MR. CACCIATORE: I would think four to five hours, depending on the length of the cross.
THE COURT: What about in your side of the ledger?
MR. CACCIATORE: I think my direct exam questions will probably be 30 to 40 minutes.
THE COURT: Okay. Let's -- how long do you anticipate your cross-examination being, Counselor, Mr. Henderson?
MR. HENDERSON: Judge, not too long. 30, 35 minutes, if that, but here's the only concern that I have.
THE COURT: Yes, sir.
MR. HENDERSON: We have one juror who has said and told us during voir dire, as long as we're getting out of here at 5:00, my scheduling is okay. After that, that causes a problem. That's the only concern I have. So if we could, like, let them know early if that's the plan so she might be able to make some arrangements. I think we probably need to do that.
MR. OWENS: Judge, and the other component, we've got some people flying in. We've got experts that we're trying to coordinate. So the sooner we know the logistics of when they're going to rest their case -- remember, we talked late last week that we felt like they were going to end their case at the end of business today, but it sounds like it may get pushed to tomorrow.
THE COURT: I think step one is conferring with our jury if they're amenable to working past 5:00. I do recall the one juror with childcare concerns if we go slightly over, and we'll have to address that when we get closer to it. It may be a situation where cross-examination may have to be left for tomorrow, but that's something that we'll need to discuss when we get closer to it.
MR. HENDERSON: Yes, Judge.
THE COURT: Anything else, State?
MR. CACCIATORE: No, Your Honor.
THE COURT: Anything else, defense?
MR. OWENS: No, Judge.
THE COURT: All right. We'll see you-all at 2:00.
MR. OWENS: Wait, Judge.
THE COURT: Yes, sir?
MR. OWENS: The State had been using CDs, I believe. We've got flash drives to admit into evidence instead of CDs. We didn't bring the capability to transfer those to CDs.
THE COURT: Response?
THE COURT: I mean, it sounds like that's what Mr. Owens' intent is for the purposes of submitting evidence.
MR. JAY: Well, one reason I would suggest not introducing USBs is because they're rewritable and they can be manipulated and destroyed by the jury or -- not that anybody would do it intentionally -- clerks of the court. Any sort of issues can happen when something is not locked and put onto a physical burnt piece of wax.
THE COURT: Mr. Owens?
MR. OWENS: We'll see what we can do here locally. There's a FedEx. I don't know if they would be able to do that. The FedEx is a block away. We'll check with them at lunch.
THE COURT: I would check with them. I agree with the State's concerns as to manipulation or editing of anything that may be contained in a USB drive. Not to say that that's going to happen, but it certainly preserves the evidence moving forward, rather than it being in an editable form, be it in a USB drive.
MR. OWENS: We'll go talk to them at lunch.
THE COURT: All right. Very good.
Okay. Thank you-all very much. We'll see you at 2:00. The Court is off the record.
(Court recessed for lunch at 12:27 p.m.)
(The following proceedings were resumed at 2:03 p.m., stenographically reported by June Bufford.)
THE COURT: You-all can be seated. Thank you.
We are back on the record. Case No. 2020-CF-2603, State of Florida vs. Sarah Boone.
Let me get appearances for the State?
MR. CACCIATORE: Dave Cacciatore on behalf of the State.
THE COURT: Defense?
MR. OWENS: James Owens for Sarah Boone.
MR. HENDERSON: Tony Henderson for Sarah Boone.
THE COURT: All right. Mr. Beck is not with us, okay.
Ms. Boone is still seated at counsel's table, wearing the same clothing that she had on this morning. She is in custody, however, out of any restraints, so we will be standing when our jury enters and exits. It's 2:04.
State, are you ready to proceed?
THE COURT: Yes.