1750 S.

Brentwood Boulevard, Suite 200

St. Louis, Missouri 63144

October 10, 2014

To whom it may concern:
On October 3rd, 2013, Acumen Consulting performed an email search on the City of Ferguson mail server for
emails matching the requested criteria. The mail server is a Microsoft Exchange Server running on Windows
Server 2008.

www.acumen-corp.com 314.333.3330
314.436.0010

The City of Ferguson has been provided with an Adobe Portfolio PDF document contains the 7 emails that
match the requested criteria.
Search criteria and configuration:
The search result contains the emails found in the following accounts:
Tom Jackson Chief
Al Eickhoff Assistant Chief
Dan DeCarli Captain
Rick Henke Captain
Dennis McBride Captain
Craig Rettke Lieutenant
William Ballard Lieutenant
Ray Nabzdyk Lieutenant
Mike Wood Sergeant
Harry Dilworth Sergeant
William Mudd Sergeant
Tim Harris Sergeant
Tim Allen Sergeant
Darren Wilson
The search was for the following phrases:
Michael Brown
National Guard
Curfew
Protest
Please note that the search would find the following phrases which were included in the result:
Protest
Protests
Protester
Protesters
The target recipients included:
All council members work and personal emails
Any address ending in mail.mo.gov
There were NO emails to any address ending in mail.mo.gov.
There are approximately 49 additional staff and non-command officers associated with the Police
Department.

1750 S. Brentwood Boulevard, Suite 200

St. Louis, Missouri 63144

The City of Hazelwood Exchange Server and Outlook email clients are configured to automatically archive
email to PST files local to each user after 90 days. This means that the search performed covers emails back to
July 6th. The search did include all Exchange folders for each user including Sent Items and Deleted Items. It is
possible to perform a per computer archive search on each laptop, but will require 30 minutes per computer
request.
Per City of Ferguson policy, it is assumed at this time that no one has violated the no email deletions policy.
The Exchange Server retains all deleted items that have been Deleted from Deleted Items. These emails are
retained for 14 days. It is possible to perform a per computer deleted item search for items that have been
deleted, but will require 30 minutes per computer request.
Five hours have been consumed in the search to this time. Per our discussion regarding budget control, I have
stopped the search at five hours and am presenting the results. I will search the remaining 49 mailboxes
associated with the Police Department if requested. We can expect that the time required will be
approximately 9 more hours for the remaining mailboxes.
Thank you,

www.acumen-corp.com 314.333.3330
314.436.0010

Robert Wagnon
President
Acumen Consulting

1750 S. Brentwood Boulevard, Suite 200

St. Louis, Missouri 63144

Work Log
The test was performed on October 3rd 2014 at 13:15.
The test was performed by Robert Wagnon.

www.acumen-corp.com 314.333.3330
314.436.0010

Request review and planning. Performed offsite

Discuss parameters of search and all security requirements with City of Ferguson staff.
Obtain physical access to server facility.
Discuss server structure with IT staff.
Determine Exchange DeletedItemRetention policy
Found to be the default of 14 days.
Determine automatic Archive policy implemented by City of Ferguson
Found to be 90 days saved locally to each workstation.
Create new read-only mailbox user and configure workstation for Outlook access to this account.
Grant read only rights to read-only mailbox user for 14 mailboxes.
Attach 14 mailbox accounts to read-only mailbox user in Outlook.
Verify Indexing status complete on all mailboxes.
Test the search similar to the requested search criteria against a known set of emails to confirm accuracy.
Perform keyword search against each mailbox (14 mailboxes).
Move results into a working folder in the read-only mailbox user Inbox.
Perform recipient search against the aggregate results located in the read-only mailbox user folder.
Move results into a final results folder in the read-only mailbox user Inbox.
Save the final results into an Outlook PST file.
Convert the PST into an Adobe Portfolio PDF file for rapid search and redaction.
Write report and communicate to City of Ferguson.
Submit this letter for notarization.