SENTINEL-DE
Secure Workstation
Starting Windows...
Copyright (C) U.S. Department of Justice - Authorized use only
SENTINEL-DE SECURE ACCESS GATEWAY
NODE SF-04-EAST-WKSTN12 · OSIC ENCLAVE
RESTRICTED U.S. GOVERNMENT SYSTEM. Authorized personnel only. All activity is monitored and recorded under 18 U.S.C. §1030.
Operator
OSIC Access Code
FBINET AES-256
OSIC Secure Remote Access Viewing remote computer SF-04-EAST-WKSTN12 Local client workstation Partner ID 771 284 913 End-to-end encrypted (AES-256) Latency 42 ms RECORDING
WORKSTATIONSF-04-EAST-WKSTN12
USERHALBRIDGE.EJ (FBINET\CE-4)
DOMAINFBINET.IC.GOV
IPv410.4.22.87 / VPN FBINET-SF
OS BUILDSENTINEL-DE 4.2.1 (9083)
LAST BOOT--
SESSIONREMOTE / OSIC-SRA
LOCAL CLIENT--
SENTINEL-DE SECURE WORKSTATION
My Computer
OPERATOR FILE
Evidence
Surveillance
Intervention
Viewer
Case Files
Verification
Recycle Bin
SENTINEL-DE
OSIC Secure Remote Access
Secure session established.
You now have control of SF-04-EAST-WKSTN12.
Everything you do happens on the remote computer. This session is encrypted (AES-256) and recorded.
Perimeter Control - Pre-Authentication Screening
Mandatory screening in progress. This phase cannot be skipped. Do not disconnect.
AUTOMATED AGENT SCREENING
Automated agents and scripted clients are prohibited on this system. Press and hold the sensor pad below until interaction capture completes. Irregular interaction patterns are appended to your permanent record.
PRESS AND HOLD TO VERIFY
ARTIFACTS RETAINED INDEFINITELY DIRECTIVE 0521.1A REF IR-2026-08841
Log On to SENTINEL-DE
PIV smart card NOT DETECTED. Fallback authentication enabled for this terminal. This event has been logged.
MONITORED PER DIRECTIVE 0521.1A 18 U.S.C. 1030 APPLIES
SENTINEL-DE (R) Evidence Management Console 4.2.1
(C) U.S. Department of Justice. Authorized use only.
SENTINEL-DE Evidence Management Console - [Case 2024-FBI-7749 // HOLLOW CHOIR] - READ ONLY
sdev://sf-04-east/cases/2024-FBI-7749/evidence/1B1
Last logon: UTC from 153.31.24.87 (SF-04 WKSTN) 1 failed attempt since last logon Password expires in 11 days Mandatory CI refresher: OVERDUE

Evidence Vault: Item 1B1

ESU-7749-EVIDENCE-HDD | FORENSIC IMAGE FTK-7749-01 | READ ONLY MOUNT
Drive Analysis
Device
WD5000AAKS
Capacity
500 GB
Bad Sectors
847
Health
CRITICAL (34%)
Image Hash
SHA-256 VERIFIED
File Summary
Total
-
Accessible
-
Corrupted
-
Encrypted
-
Protected
-
Related Items
1B2Burner handset, damaged[RCFL]
1B3SIM cards x7[ECR]
1B4Swab kit, altar residue[LAB]
1B5Notebook, handwritten[SEALED]
1B6Candle fragments x12[ECR]
ITEMS 1B2-1B6 NOT AVAILABLE ON THIS TERMINAL
Recovered Data: /RECOVERED_DATA/
17 object(s) catalogued from image FTK-7749-01
Filter:
TypeFile NameStatusSizeModified
0 OBJECTS VIEW: DETAILS | SORT: CATALOG LAST SWEEP:
Ready 17 object(s) READ ONLY LAT 41ms REC 30:00
Evidence Viewer
SENTINEL-DE FORENSIC VIEWER 4.2 | READ ONLY | EXPORT DISABLED ITEM 1B1 / FTK-7749-01
Encrypted Container
AES-256 CONTAINER  |  SUBJECT-CONTROLLED KEY
This container was not encrypted by the Bureau. The passphrase was set by the subject. Three failed attempts trigger a 5 minute cooldown.
Messages (2 unread)
LAB RESULT PENDINGDNA sequencing on item 1B4 delayed by RCFL backlog.
WARRANT UPDATESealed warrant 24-MJ-3317 extended by USDC-NDCA.