Skip to content
Garcia–MagbanuatranscripttranscriptJohn Sawicki — Direct/Cross/Redirect - Day 8 - Garcia–MagbanuaDefense digital-forensics expert John Sawicki testified about message-record gaps, cell-tower connections, and limits in interpreting phone data.
Georgia CapplemanAnna NorrisChristopher DeCosteSaam ZangenehJames C. HankinsonJohn SawickiMr. ZangenehJudge HankinsonJohn SawickiMs. NorrisMr. DeCosteMs. Capplemandirectcrossredirect
Garcia–Magbanua/Day 8/October 8, 2019
11 pages·9 witnesses·4,483 lines
The State rested after Sanford, surveillance, and financial-record testimony. The court denied acquittal motions as both defenses began presenting witnesses.
DirectDirectJohn Sawicki - Direct John Sawicki Saam Zangeneh
11:35:50

MR. ZANGENEH: Judge, the defense calls John Sawicki. I'll go grab him, Judge.

21:36:02

JUDGE HANKINSON: Some courthouses have a witness room where we can kind of intercom to the witnesses to come in. we don't have anything like that. So the lawyers just have to go grab the witnesses. The bailiffs have special, you know, particular assignments. we don't send the bailiffs out to get witnesses.

31:36:22

(Pause in proceedings.)

41:36:23

JUDGE HANKINSON: If you would, face the clerk and be sworn, please, sir.

51:36:30

whereupon, JOHN SAWICKI, was called as a witness, having been first duly sworn, was examined and testified as follows:

61:36:41

JUDGE HANKINSON: Have a seat and slide up to the microphone, please, sir.

71:36:47

MR. ZANGENEH: May I inquire, Judge?

81:36:48
91:36:49

DIRECT EXAMINATION BY MR. ZENGENEH:

101:36:50

MR. ZANGENEH: Could you please introduce yourself to the members of the jury?

111:36:53

JOHN SAWICKI: My name is John Sawicki, S-A-wW-I-C-K-I.

121:36:57

MR. ZANGENEH: And that's J-O-H-N or J-O-N?

131:36:59

JOHN SAWICKI: J-O-H-N.

141:37:00

MR. ZANGENEH: Can you tell the members of the jury how you are employed?

151:37:04

JOHN SAWICKI: I'm a forensic computer scientist and an electronic evidence consultant.

161:37:08

MR. ZANGENEH: What does that mean?

171:37:10

JOHN SAWICKI: Essentially, what that means is I dig through computers, cell phones, cell phone records, attempt to determine what the user's done with the device, document what I find, and prepare to testify about it later.

181:37:23

MR. ZANGENEH: Do you spend any time conducting research with regards to cell tower analysis?

191:37:29
201:37:31

MR. ZANGENEH: How long have you been employed in this manner?

211:37:33

JOHN SAWICKI: I started my company in 2011. I left my law practice to do this full-time in 2013.

221:37:40

MR. ZANGENEH: So before you became an expert in this field or someone that testifies with regards to this field, you were an attorney?

231:37:48

JOHN SAWICKI: I was, yes.

241:37:51

MR. ZANGENEH: And how long were you an attorney?

251:37:53

JOHN SAWICKI: I spent about seven or eight years practicing mostly labor and employment litigation.

261:37:57

MR. ZANGENEH: Not criminal defense?

271:37:59

JOHN SAWICKI: Not criminal defense, except for maybe a rare case.

281:38:01

MR. ZANGENEH: Are you admitted to practice law in the state of Florida?

291:38:06
301:38:07

MR. ZANGENEH: Do you have any other special licenses?

311:38:09

JOHN SAWICKI: I have a private detective's license in Georgia.

321:38:12

MR. ZANGENEH: And before that?

331:38:13

JOHN SAWICKI: I spent nine years with the Douglas County, Oregon, Sheriff's Office.

341:38:17

MR. ZANGENEH: So law enforcement, private investigator, attorney, and now you testify with regards to this specialty?

351:38:25

JOHN SAWICKI: Yes, sir.

361:38:26

MR. ZANGENEH: what kind of education do you have, if you don't mind me asking?

371:38:28

JOHN SAWICKI: I have an undergraduate degree from Georgia Fox University in management and human resources. I have a law degree from Florida State University. I have a graduate certificate in computer forensics from the University of Central Florida. I have a master's degree in digital forensics from the University of Central Florida.

381:38:46

MR. ZANGENEH: In addition to those degrees, do you have any specialized training in the field that you work in?

391:38:51

JOHN SAWICKI: Yeah, I have somewhere in the neighborhood of six to seven hundred hours of specialized training in computer and forensics applications, interpreting cell tower records, how cell phone networks operate.

401:39:03

MR. ZANGENEH: Do you have any training specifically in the area of cell tower analysis?

411:39:07
421:39:07

MR. ZANGENEH: Can you tell the members of the jury what this training is?

431:39:10

JOHN SAWICKI: Yeah, I've had training from a company called Access Data in how cell call detail records work, how to interpret them. Training from a company called Teracom Training Institute, again, on how cell tower networks function and operate. I took a course from a company called PA Tech in how to map cell calls, cell tower activity. I've done graduate level course work in the area of radio frequency engineering through the University of California San Diego's extension program.

441:39:47

MR. ZANGENEH: About how many cases have you been involved in cell tower analysis?

451:39:52

JOHN SAWICKI: Somewhere in the neighborhood of six or seven hundred.

461:39:54

MR. ZANGENEH: And have they all been criminal cases?

471:39:58

JOHN SAWICKI: No, they have not. we started using cell tower analysis in civil cases as well.

481:40:02

MR. ZANGENEH: Have you ever given expert testimony in this area?

491:40:05

JOHN SAWICKI: I have, probably 50 or 60 times.

501:40:08

MR. ZANGENEH: And does that mean that you've testified 50 or 60 times?

511:40:11

JOHN SAWICKI: Somewhere in that range. I don't have a complete log, but it's in that neighborhood.

521:40:16

MR. ZANGENEH: And these testimonies are in state or federal court or both?

531:40:21

JOHN SAWICKI: State and federal court in states across the country.

541:40:25

MR. ZANGENEH: How many of the Florida judicial circuits have you given expert testimony in?

551:40:28

JOHN SAWICKI: At this point I believe 15.

561:40:31

MR. ZANGENEH: And how many are there in total?

571:40:32

JOHN SAWICKI: There are 20.

581:40:33

MR. ZANGENEH: So 15 out of 20?

591:40:35

JOHN SAWICKI: Yes, sir.

601:40:37

MR. ZANGENEH: And what circuit are we in here?

611:40:39

JOHN SAWICKI: This would be the Second Judicial Circuit.

621:40:41

MR. ZANGENEH: How many times have you testified in the Second Judicial Circuit?

631:40:43

JOHN SAWICKI: A handful.

641:40:44

MR. ZANGENEH: How many cases on your case load are criminal versus civil in percentage wise?

651:40:52

JOHN SAWICKI: It fluctuates depending on the particular time, but at this point probably 60 or 70 percent are criminal.

661:40:59

MR. ZANGENEH: Have you presented any training courses in this area of expertise that you have?

671:41:04

JOHN SAWICKI: I have. I routinely provide continuing legal education and training to judges and lawyers throughout Florida and Georgia in and how cell tower networks operate, how electronic devices store data, and how to extract that data.

681:41:17

MR. ZANGENEH: Your Honor, at this time I would tender Mr. Sawicki as an expert witness.

691:41:22

JUDGE HANKINSON: Any voir dire?

701:41:23

MS. NORRIS: No, Judge.

711:41:23

JUDGE HANKINSON: All right. You may proceed.

721:41:25

BY MR. ZENGENEH:

731:41:25

MR. ZANGENEH: Okay. So you're familiar with this case, correct?

741:41:31
751:41:32

MR. ZANGENEH: And my firm has retained you with regards to your expertise in this field, correct?

761:41:37

JOHN SAWICKI: Yes, sir.

771:41:37

MR. ZANGENEH: And my firm represents Mr. Garcia, correct?

781:41:40

JOHN SAWICKI: Yes, sir.

791:41:41

MR. ZANGENEH: Okay. So you've gotten all the calls and the icloud stuff and all the other data that the jury's seen today, correct?

801:41:52

JOHN SAWICKI: I don't know what the jury's seen today, but I've certainly had the opportunity to review a vast amount of data.

811:41:57

MR. ZANGENEH: And it is a lot of stuff, right?

821:41:59

JOHN SAWICKI: There's a lot of material.

831:42:00

MR. ZANGENEH: Okay. So you're aware that there's a defendant in this case named Luis Rivera, correct?

841:42:06

JOHN SAWICKI: Yes, sir.

851:42:07

MR. ZANGENEH: And you're aware that there is -- I don't know if I call him a target or the person of interest, but you're aware who -- you know who Charlie Adelson is, correct?

861:42:16

JOHN SAWICKI: Yes, sir.

871:42:17

MR. ZANGENEH: Okay. Do you know what kind of phone Luis Rivera had?

881:42:20

JOHN SAWICKI: I understand he had an iPhone.

891:42:22

MR. ZANGENEH: And when I'm talking about what kind of phone he had, I mean during the relevant portion of this case from June 2014 until, let's say, July of 2014.

901:42:31

JOHN SAWICKI: Yes, sir.

911:42:31

MR. ZANGENEH: Okay. So Luis Rivera had an iPhone? That was your testimony?

921:42:35

JOHN SAWICKI: As I understand it.

931:42:36

MR. ZANGENEH: And what about Charlie Adelson, do you know what kind of phone he had?

941:42:39

JOHN SAWICKI: I understand he had an iPhone as well.

951:42:41

MR. ZANGENEH: And how would you know this? How do you get this information?

961:42:43

JOHN SAWICKI: From the records that I've reviewed.

971:42:44

MR. ZANGENEH: Okay. And from the records you reviewed, can you tell the members of the jury -- like, you get an -- like, they both have AT&T, correct? Or at least I know Luis Rivera had AT&T, correct?

981:42:53

JOHN SAWICKI: I believe they both had AT&T, yes.

991:42:57

MR. ZANGENEH: And when you get certain information from subpoena's from AT&T, do they provide this information to you, what kind of phone was used?

1001:43:06

JOHN SAWICKI: They do. There's a series of records that you get in response to subpoenas or search warrants that the Government did in this case. You get subscriber records which would indicate who an account holder would be, when the account was established potentially, the address for the individual. You get -- also get call detail reports that list different activities on the phone. In case of AT&T it could be phone calls, SMS and MMS text messages, and data records as well.

1011:43:39

MR. ZANGENEH: So with regards to iPhones, do iPhones have the ability to make a call or to send a message that would not show up on a call detail report?

1021:43:53

JOHN SAWICKI: They do.

1031:43:54

MR. ZANGENEH: Okay. Explain to the members of the jury how something like this would happen?

1041:43:58

JOHN SAWICKI: So the call detail record, essentially, shows the transaction I was just talking about, the phone calls and the text messages. It also shows the data, but that's like one big bucket. So you don't get to see every individual piece that's within it. But the phone is able to use a variety of different messaging platforms, calling platforms, that will never actually show on a call detail report as a phone call or as a text message.

1051:44:24

MR. ZANGENEH: Now, have you reviewed the iCloud extraction for Charlie Adelson in this case?

1061:44:29
1071:44:33

MR. ZANGENEH: And when did you do that?

1081:44:35

JOHN SAWICKI: Most recently over the weekend.

1091:44:38

MR. ZANGENEH: This last weekend?

1101:44:39

JOHN SAWICKI: Yes, sir.

1111:44:40

MR. ZANGENEH: And did you find any evidence of deleted material in Charlie Adelson's iCcloud?

1121:44:45
1131:44:47

MR. ZANGENEH: what does that mean?

1141:44:48

JOHN SAWICKI: So there's really two different components to deleted material. The first piece -- let me take a step back. The iCloud shows material from the phone that's been backed up to the cloud, somebody else's server across the internet. And so in this case it happens to be Apple's server, and Apple stores those backups. That's kind of like taking a snapshot of the phone throughout time. In this particular iCloud backup, we can actually see that there is deleted material that's been marked as deleted both in the areas of phone calls and text messages.

1151:45:23

MR. ZANGENEH: Are you able to show other deletions that aren't detailed in the icloud data?

1161:45:27

JOHN SAWICKI: we can. One of the ways that we can do that is, we can look to areas where we know how many particular events occurred and see if that matches with the number of events that are shown within the icloud report. So for example --

MR. ZANGENEH: Could you give us a specific example?

1181:45:42

JOHN SAWICKI: Sure. For example, within the iCloud report we see SMS messages and MMS messages. We also see those within the call detail report.

1191:45:58

MR. ZANGENEH: And hold on. Are we talking about anyone in particular in this case? This is still Charlie Adelson's, correct?

1201:46:04

JOHN SAWICKI: well, we're speaking in general about AT&T and icloud, but specifically for Mr. Adelson we can see that as well.

1211:46:08

MR. ZANGENEH: Is there -- was there a specific example on Mr. Adelson's iCloud account that you could tell the members of this jury which highlighted these deletions?

1221:46:18

JOHN SAWICKI: Yeah. we were able to compare SMS and MMS messages for particular periods of time. And I think there were two different sets of call detail reports that I looked at to compare the call detail report to the icloud information to see what was actually there. And what we saw was a significant number of messages that appeared within the call detail report that didn't show up within the icloud information.

1231:46:42

MR. ZANGENEH: So that means that there is a record of an actual event talking place, right?

1241:46:48

JOHN SAWICKI: Yes, sir.

1251:46:49

MR. ZANGENEH: And so iCloud is like -- and you described this to me the other day. So I want you to describe it to the members of the jury because I didn't understand how iCloud works. Can you tell the members of the jury how iCloud keeps track of your data?

1261:47:01

JOHN SAWICKI: So the icloud data is, essentially, your phone automatically backing itself up to a computer remotely, and it does this -- depending on how it's set up -- at regular intervals or when you force it to do so. And so you effectively get a number of different snapshots of what it looks like across time.

1271:47:19

MR. ZANGENEH: So let me ask you a question. So if an iPhone -- let's say Charlie Adelson's iPhone backs up at 9 o'clock, okay? well, let's say from 1 o'clock to 9 o'clock is when they do its data retrieval, and someone sends a message at 4 o'clock; and then deletes it. Would it be part of the call detail report?

1281:47:41

JOHN SAWICKI: It should be part of the call detail report if it's sent as a text message.

1291:47:44

MR. ZANGENEH: would it be in the iCcloud?

1301:47:45

JOHN SAWICKI: Not necessarily. It could show in a couple of different ways. It could show -- well, actually, I take that back. It won't show it -- one way, it could show as deleted. If it's still sitting within the database within the phone for text messages at the time that it backs up, it could still show as a deleted text message. Or if it's been overwritten from that point, it won't show up at all.

1311:48:07

MR. ZANGENEH: well, what about -- let me give you -- I know that we talked about this. Let's tell the members of the jury what you found out when you ran an analysis between May Ist of 2014 and June 20th of 2014 for Charlie Adelson. Do you remember how many messages were on his phone using SMS and MMS?

1321:48:26

JOHN SAWICKI: If I could look on my notes?

1331:48:28

MR. ZANGENEH: Of course you can. Let me -- take a look. Refresh your recollection. And when it's adequately refreshed, let me know.

1341:48:37

JOHN SAWICKI: For the call detail report from May 1st to June 20th, there were 3,084 SMS and MMS messages. Within the icloud there were 1,241.

1351:48:49

MR. ZANGENEH: Okay. So let me -- I'm terrible with math. So let me go to my calculator here. So there were 3,084 messages and 1,084 of them appeared. That means there were 1,800 messages that were sent that don't appear in the iCloud documentation, correct?

1361:49:13

JOHN SAWICKI: That's correct.

1371:49:14

MR. ZANGENEH: That's more than half?

1381:49:17

JOHN SAWICKI: It appears that way.

1391:49:18

MR. ZANGENEH: Now, did you review any other time periods? I mean, obviously, you know between May 1st and June 20th is kind of the beginning phases of this conspiracy, coming up to a relevant portion of this conspiracy. You're aware of that, correct?

1401:49:35

JOHN SAWICKI: Yes, sir.

1411:49:36

MR. ZANGENEH: well, did you review any other time periods to see if this was a consistent thing that Mr. Adelson did?

1421:49:41

JOHN SAWICKI: I reviewed a second set of call detail reports from Mr. Adelson from June 18th of '14 through July 18th of ‘14.

1431:49:49

MR. ZANGENEH: And during your review, how many call detail -- I'm sorry. HOW many messages were sent via SMS and MMS?

1441:49:57

JOHN SAWICKI: The call detail report shows 1,587 messages sent.

1451:50:01

MR. ZANGENEH: From Charlie Adelson, from his phone?

1461:50:04

JOHN SAWICKI: well, sent or received.

1471:50:06

MR. ZANGENEH: Okay. Sent or received. How many of those appeared in the cellebrite extraction?

1481:50:11
1491:50:14

MR. ZANGENEH: So 1,587 minus 789, so that means that 798 of those messages are gone, almost half?

1501:50:38

JOHN SAWICKI: It's a significant number.

1511:50:40

MR. ZANGENEH: And is there any way to account for what those messages said or who they were sent to?

1521:50:47

JOHN SAWICKI: There's not.

1531:50:48

MR. ZANGENEH: Can you explain this difference?

1541:50:55

JOHN SAWICKI: All I can say is it's not in the icloud backup when that was created. So it could have been deleted. It could have -- there could have been some other reason it didn't back up to the cloud, but all we know is it wasn't captured.

1551:51:09

MR. ZANGENEH: Have you seen the iCloud data for Luis Rivera?

1561:51:13

JOHN SAWICKI: I have not.

1571:51:14

MR. ZANGENEH: You have not?

1581:51:16

JOHN SAWICKI: No, sir.

1591:51:17

MR. ZANGENEH: what about Katie Magbanua?

1601:51:20

JOHN SAWICKI: I've seen minimal iCloud data for Ms. Magbanua.

1611:51:25

MR. ZANGENEH: Have you reviewed Katie Magbanua's cell tower usage for the morning of July 19th, 2014?

1621:51:30
1631:51:32

MR. ZANGENEH: Did your review of Mr. Adelson's iCloud -- during your review, pardon me, of Mr. Adelson's iCloud account, did you find evidence of other communication platforms?

1641:51:41
1651:51:42

MR. ZANGENEH: Was there evidence that he had a messaging app called whatsApp?

1661:51:47

JOHN SAWICKI: There was.

1671:51:47

MR. ZANGENEH: what about Threema?

1681:51:49

JOHN SAWICKI: There was.

1691:51:50

MR. ZANGENEH: And FaceTime?

1701:51:52

JOHN SAWICKI: Yes, sir.

1711:51:53

MR. ZANGENEH: So is it possible that Charlie Adelson communicated directly with Luis Rivera?

1721:51:58

JOHN SAWICKI: I can't exclude that possibility.

1731:52:00

MR. ZANGENEH: And that's based on the fact that he had these other messaging apps, correct?

1741:52:03

JOHN SAWICKI: Yes, sir.

1751:52:05

MR. ZANGENEH: Have you reviewed Ms. Magbanua's phone records?

1761:52:07
1771:52:09

MR. ZANGENEH: And were you able to identify the towers her phone used at the time the Government said -- suggested that she was at Jessica Rodriguez’ apartment on, I believe, July 19th, 2014?

1781:52:21
1791:52:22

MR. ZANGENEH: where are those towers located?

1801:52:24

JOHN SAWICKI: The towers that I understand the Government believes -- well, that the call detail report indicates she was using between 10:02 and 10:32 on the morning of the 19th, the tower is located about two-thirds of a mile southeast of Ms. Rodriguez's home right on Biscayne Boulevard.

1811:52:45

MR. ZANGENEH: And is that tower located in between Charlie Adelson's addresses in Broward and Ms. Magbanua's residence in Miami Beach?

1821:52:54

JOHN SAWICKI: I believe it is, yes.

1831:52:55

MR. ZANGENEH: And have you ever been to Miami?

1841:52:59
1851:53:00

MR. ZANGENEH: And would you disagree that Biscayne Boulevard is one of the most common traveled routes in South Florida for Miami?

1861:53:10

JOHN SAWICKI: I can't speak to most common, but it is a heavily traveled street.

1871:53:13

MR. ZANGENEH: Now, let me ask you a question with regards to the antennas on that tower. How has Sprint identified the antennas on that tower?

1881:53:25

JOHN SAWICKI: There's actually two sets of antennas on the tower.

1891:53:28

MR. ZANGENEH: I'm sorry. Let me ask you -- I forgot to ask you. Ms. Magbanua's phone is with the Sprint network, correct?

1901:53:33

JOHN SAWICKI: That's correct.

1911:53:33

MR. ZANGENEH: Okay. And so how has Sprint identified the antennas on that tower?

1921:53:38

JOHN SAWICKI: There are actually two sets of antennas on the tower which, basically, overlap one another. They've numbered the two sets as 7740 and 6740.

1931:53:49

MR. ZANGENEH: Okay. How are these antennas laid out?

1941:53:51

JOHN SAWICKI: So it's not unlike a typical cell structure in that we do have three antennas. Now, while many cell structures are laid out with each of those focused at 120-degree angles from one another so that you would have one at zero degrees, one at 120-degrees, one at 240-degrees, these are shifted slightly.

1951:54:15

MR. ZANGENEH: And do you know what they are?

1961:54:17

JOHN SAWICKI: If I could refer to my notes?

1971:54:18

MR. ZANGENEH: Yeah, please. So normally it's zero, 120, and 240, correct?

1981:54:25

JOHN SAWICKI: Correct. In this case it's 10-degrees, 200-degrees, and 260-degrees. So they've shifted them slightly.

1991:54:34

MR. ZANGENEH: And do you know why the antennas aren't at the optimal 120-degree angle?

2001:54:39

JOHN SAWICKI: well, in this case you have a highly traveled street which runs right next to the antenna. So it would make sense if they were shifted to increase the capacity. Antenna one, which would be to the north is pointed slightly to the northeast. So it, essentially, points right down Biscayne Boulevard. The other two antennas, which are pointing to the southeast and southwest, frankly, they're both pointing to the southwest slightly, have been shifted so they would shoot down the south of Biscayne Boulevard. Essentially, what it does is it creates additional coverage in the area.

2011:55:13

MR. ZANGENEH: And this is the area between Ms. Magbanua's residence and Charlie Adelson's residence, correct?

2021:55:18

JOHN SAWICKI: Yes, sir.

2031:55:18

MR. ZANGENEH: Now, were you able to determine the frequency of how often Ms. Magbanua's phone used that tower between May of 2014 and September of 2015?

2041:55:33

JOHN SAWICKI: Yeah, approximately 1,100 times that her phone used that cell tower.

2051:55:38

MR. ZANGENEH: So do you have a percentage of the amount of time that her phone was being used?

2061:55:45

JOHN SAWICKI: Yeah, it's about 11 and a half percent of the overall antenna usage that they were able to track. And what I mean by that is, there is numbers of calls which Sprint hasn't recorded the antenna that's actually being used for it. So for those that they are actually able to establish a tower, about 11 and a half percent.

2071:56:04
2081:56:04

JOHN SAWICKI: It was, actually, the third most used tower.

2091:56:06

MR. ZANGENEH: So about a little over 10 percent of her time is between those areas, correct? It marks off with that cell tower?

2101:56:20

JOHN SAWICKI: Correct.

2111:56:21

MR. ZANGENEH: Give me one second, Judge.

2121:56:27

(Pause in proceedings.)

2131:56:37

MR. ZANGENEH: JI have no further questions of Mr. Sawicki. Thank you.

2141:56:38
2151:56:38

MR. DECOSTE: Yes, Your Honor. Thank you.

2161:56:39

CROSS-EXAMINATION BY MR. DECOSTE:

2171:56:39

MR. DECOSTE: Good afternoon.

2181:56:45

JOHN SAWICKI: Good afternoon.

2191:56:46

MR. DECOSTE: what's your name again?

2201:56:46

JOHN SAWICKI: John Sawicki.

2211:56:48

MR. DECOSTE: Have we ever met before?

2221:56:49

JOHN SAWICKI: I can't tell you for sure.

2231:56:52

MR. DECOSTE: You're not our expert on this case, right?

2241:56:54

JOHN SAWICKI: No, sir.

2251:56:55

MR. DECOSTE: You're tied over to Sigfredo Garcia?

2261:56:58

JOHN SAWICKI: Yes, sir.

MR. DECOSTE: All right. Quick question, quick topic. what is kicking for a tower?

2281:57:07

JOHN SAWICKI: Kicking? I'm not familiar with that as a technical term. If you're referring to the process of a phone call using a tower other than the immediate tower next to it, I suppose that could be what you're referring to.

2291:57:21

MR. DECOSTE: It is, yes. And sorry for using the crude language. Basically, if you could explain to this jury how somebody could be in the vicinity of a tower -- I could be close to a tower and within one sector but not communicating with that sector of that tower but instead communicating with another tower or a further away tower?

2301:57:42

JOHN SAWICKI: Your question kind of anticipates that you would only connect to one tower from a particular location. That's certainly not the case. You could connect to a number of towers from any particular location depending on where you happen to be and the circumstances at a particular time.

The cell phone is going to connect to the tower with the strongest, cleanest signal. That could be the closest tower. It could not be the closest tower. It just depends on all the specifics of the network, of the geography of the area at that particular point in time.

2311:58:24

MR. DECOSTE: If there were a lot of traffic -- and we're not talking about cell phone traffic. We're talking about vehicles. <A lot of traffic on somewhere like Biscayne, rush hour, people on the phone, and there's lot of traffic on one sector of one tower, could that cause somebody to not communicate with that sector and instead communicate with another tower?

2321:58:43

JOHN SAWICKI: Your question presupposes you would have automatically connected to that tower in the first place. And I don't know that that's necessarily the case. If you are suggesting that you've got two towers in one location and because of network traffic at that point in time you're unable to connect to cell tower A and instead you connect to cell tower B, that's certainly possible. But regardless of that, you certainly have to be within the range of cell tower B.

2331:59:14

MR. DECOSTE: And last question, that range, I know it's dependent on specific towers. You could be miles away from a tower and still communicating with that tower, right?

2341:59:24

JOHN SAWICKI: Depending on the tower, yes.

2351:59:25

MR. DECOSTE: And this is not just one or two miles, this can go up to ten or more miles; is that correct?

2361:59:30

JOHN SAWICKI: Depending on where you're at, absolutely.

2371:59:32

MR. DECOSTE: One brief second, Your Honor.

2381:59:36

(Pause in proceedings.)

2391:59:38

MR. DECOSTE: No further questions. Thank you, Mr. Sawicki.

2401:59:43
2411:59:44

MS. NORRIS: Can I have one moment, Your Honor?

2421:59:50

JUDGE HANKINSON: Somebody needs a break. ATI right. we'll take ten minutes. Either side need anything?

MR. ZANGENEH: No, Judge.

MS. NORRIS: No, Your Honor.

JUDGE HANKINSON: All right. Ten minutes.

(Jury exits.)

(Court is in recess.)

JUDGE HANKINSON: Let's have the jury, please.

CrossCrossJohn Sawicki - Cross John Sawicki Anna Norris

(Jury enters.)

JUDGE HANKINSON: Everybody have a seat, please.

State?

MS. NORRIS: Thank you, Judge.

CROSS-EXAMINATION BY MS. NORRIS:

2542:11:38

MS. NORRIS: Good afternoon.

2552:11:39

JOHN SAWICKI: Good afternoon.

2562:11:39

MS. NORRIS: I want to start by asking you about the iCloud extraction that you looked at in comparison to the call detail records to determine if there were some messages from the call detail records that did not appear in the iCloud consistent with having been deleted, okay?

2572:11:56

JOHN SAWICKI: Consistent with not being there?

2582:11:57

MS. NORRIS: with not being there, excuse me. When you were using the call detail records to come up with your 3,084 text messages, SMS or MMS messages, were you just looking at the total numbers of text messages or the actual content to confirm that they were, in fact, text messages?

2592:12:21

JOHN SAWICKI: Frankly, that's the overall number, yes.

2602:12:23

MS. NORRIS: Okay. So that's the -- would you agree that sometimes when a cell phone is powered up, it receives you a notification that appears as a text message to alert you that you have a voice mail for example?

2612:12:34

JOHN SAWICKI: It could do that occasionally, yes.

2622:12:36

MS. NORRIS: And that could appear to be a text message although it's not?

2632:12:38

JOHN SAWICKI: It could.

2642:12:39

MS. NORRIS: So those were not excluded from that overall 3,084 number?

2652:12:44

JOHN SAWICKI: That's true.

2662:12:45

MS. NORRIS: Did you also look for that same time period Mr. Zangeneh asked you about at Katherine Magbanua's call details records compared to her icloud messages?

2672:12:57

JOHN SAWICKI: The copy of the icloud messages they had for her didn't have content to them. So I wasn't able to compare them.

2682:13:02

MS. NORRIS: Did you compare the numbers?

2692:13:03

JOHN SAWICKI: No, I wasn't able to see the messages that were sent and received.

2702:13:07

MS. NORRIS: So despite the fact that some of those text messages did not appear on the iCloud, there was still evidence in Katherine -- sorry, in Charlie Adelson's icloud that Charlie Adelson and Katherine Magbanua were communicating?

2712:13:22

JOHN SAWICKI: That's correct.

2722:13:23

MS. NORRIS: And numerous of those messages were deleted?

2732:13:27

JOHN SAWICKI: That's true.

2742:13:33

MS. NORRIS: with respect to communications between Charlie Adelson or Luis Rivera, you found no evidence that Charlie Adelson communicated with Luis Rivera, did you?

2752:13:43

JOHN SAWICKI: That's true.

2762:13:47

MS. NORRIS: How many cell towers are there -- or cell sites are there between Charlie Adelson's residence in South Florida and Katherine Magbanua's residence?

2772:13:54

JOHN SAWICKI: I didn't count the number of towers, but it's a fair distance. So there's going to be a large number of towers.

2782:14:00

MS. NORRIS: would you agree that the towers are closer together in a highly populated area such as the one relevant to this case?

2792:14:08

JOHN SAWICKI: Absolutely.

2802:14:09

MS. NORRIS: They're not miles and miles apart, these towers, are they?

2812:14:12

JOHN SAWICKI: That's correct.

2822:14:13

MS. NORRIS: Specifically with respect to the time period on the morning of July 19th, 2014, between ten -- I believe it was 10:02 and 10:32 a.m.?

2832:14:29

JOHN SAWICKI: Yes, ma'am.

2842:14:30

MS. NORRIS: we were talking about a cell site or tower that Katherine Magbanua's phone was communicating with. Do you recall those questions?

2852:14:38

JOHN SAWICKI: Yes, ma'am.

2862:14:38

MS. NORRIS: You would agree with me that the cell site Katherine Magbanua was communicating with during that timeframe on July 19th, 2014, could be consistent with Jessica Rodriguez's house?

2872:14:51

JOHN SAWICKI: There was certainly --

2882:14:52

MR. DECOSTE: Objection. Speculation.

2892:14:52

JUDGE HANKINSON: Overruled.

2902:14:53

BY MS. NORRIS:

2912:14:54

MS. NORRIS: I'm sorry. Let me ask that again. Do you agree that the cell site Katherine Magbanua's phone is communicating with the morning of July 19th during that 10:00 to 10:30 timeframe could be consistent with Jessica Rodriguez's house?

2922:15:08

JOHN SAWICKI: There is certainly activity during that time period that could be, yes.

2932:15:11

MS. NORRIS: Consistent with the house?

2942:15:12

JOHN SAWICKI: Yes, ma'am.

2952:15:24

MS. NORRIS: You mentioned that 11 percent of the activity for that particular antenna -- did you remember that 11 percent amount?

2962:15:32
2972:15:33

MS. NORRIS: would that be consistent with Katherine Magbanua being at Jessica Rodriguez's house as being her friend?

2982:15:40

JOHN SAWICKI: It could be.

2992:15:42

MS. NORRIS: If I can have one moment, Judge?

3002:15:48

JUDGE HANKINSON: Could I clarify a point on that. when you say -- I think you said 11 and a half percent, are you talking about in usage time or in number of instances?

3012:15:58

JOHN SAWICKI: Your Honor, that's the number of instances.

3022:16:00
3032:16:01

MS. NORRIS: I have no further questions, Judge. Thank you.

RedirectRedirectJohn Sawicki - Redirect John Sawicki Saam Zangeneh
3042:16:03

JUDGE HANKINSON: All right. Garcia?

3052:16:04

REDIRECT EXAMINATION BY MR. ZENGENEH:

3062:16:10

MR. ZANGENEH: You heard Ms. Norris ask you if there's any evidence of any activity between Charlie Adelson and Luis Rivera, correct?

3072:16:17

JOHN SAWICKI: Yes, sir.

3082:16:18

MR. ZANGENEH: And you said, no, right?

3092:16:19

JOHN SAWICKI: Yes, sir.

3102:16:20

MR. ZANGENEH: And that's because the evidence that you have is the iPhone -- the one iPhone that's related to Luis Rivera, correct?

3112:16:28

MS. NORRIS: Objection. Leading.

3122:16:28

JUDGE HANKINSON: Sustained.

3132:16:29

BY MR. ZENGENEH:

3142:16:29

MR. ZANGENEH: How many phones did you make that determination of that belonged to Luis Rivera?

3152:16:36
3162:16:36

MR. ZANGENEH: were you aware if Luis Rivera had multiple throw phones?

3172:16:44

JOHN SAWICKI: I understand there's a number of devices that have been connected to him.

3182:16:51

MR. ZANGENEH: Do you have those phone numbers?

3192:16:53

JOHN SAWICKI: I don't have them now, no.

3202:16:55

MR. ZANGENEH: So when Ms. Norris -- when the prosecutor asked you if there's any correlation between Charlie Adelson and Luis Rivera, you don't have all of Luis Rivera's contacts, correct?

3212:17:08

JOHN SAWICKI: Correct.

3222:17:15

MR. ZANGENEH: And if Charlie Adelson had been making FaceTime calls, would there be a record of that in the iCloud?

3232:17:25

JOHN SAWICKI: There could be.

3242:17:27

MR. ZANGENEH: Could there potentially not be a record of it if he deleted it right after he did it?

3252:17:31

JOHN SAWICKI: Correct.

3262:17:32

MR. ZANGENEH: As someone that testifies with regards to cell usage and telephones in general, are you aware that people that are involved in nefarious activities like drug dealers and gang members often use disposable phones?

3272:17:53

MS. NORRIS: Objection. Lack of foundation and speculation.

3282:17:55

JUDGE HANKINSON: Overruled.

3292:17:56

JOHN SAWICKI: I am familiar with that, yes.

3302:17:58

BY MR. ZENGENEH:

3312:17:58

MR. ZANGENEH: And is that true?

3322:17:59
3332:18:00

MR. ZANGENEH: No further questions.

3342:18:02

JUDGE HANKINSON: All right. Any juror have a question of this witness? All right. If not, you may step down. Do we need to keep him further?

3352:18:08

MR. ZANGENEH: Not from us, Judge.

3362:18:09

JUDGE HANKINSON: Anybody need him further?

3372:18:11

MR. DECOSTE: No, Your Honor.

3382:18:12

JUDGE HANKINSON: All right. You're excused.

3392:18:13

JOHN SAWICKI: Thank you, Your Honor.

3402:18:15

JUDGE HANKINSON: Call your next witness.

Continue to next page7.Garcia Waives Testimony and Rests