Skip to content
Garcia–Magbanua transcript transcript John Sawicki — Direct/Cross/Redirect - Day 8 - Garcia–Magbanua Garcia's retained digital-forensics and cell-tower expert John Sawicki testified on direct, cross, and redirect about gaps between AT&T call-detail records and Charlie Adelson's iCloud extraction, alternative communication channels in Adelson's iCloud, and Magbanua's July 19 Biscayne Boulevard tower activity. Anna NorrisChristopher DeCosteSaam ZangenehJames C. HankinsonJohn SawickiMr. ZangenehJudge HankinsonJohn SawickiMs. NorrisMr. DeCostedirectcrossredirect
Garcia–Magbanua / Day 8 / October 8, 2019
11 pages · 9 witnesses · 3,626 lines
Garcia's retained digital-forensics and cell-tower expert John Sawicki testified on direct, cross, and redirect about gaps between AT&T call-detail records and Charlie Adelson's iCloud extraction, alternative communication channels in Adelson's iCloud, and Magbanua's July 19 Biscayne Boulevard tower activity.
Proceedings
Direct John Sawicki - Direct Line 1
Cross 1 John Sawicki - Cross Line 217
Cross 2 John Sawicki - Cross Line 247
Redirect John Sawicki - Redirect Line 298
1 1:36:02

MR. ZANGENEH: The Defense calls John Sawicki.

2 1:36:02

JUDGE HANKINSON: Because Some courthouses have a witness room where we can kind of intercom to the witnesses to come in. We don't have anything like that, so the lawyers just have to go grab the witnesses. The bailiffs have a particular assignment, so we don't send the bailiffs out to get witnesses.

3 1:36:33
4 1:36:40

JUDGE HANKINSON: Have a seat. Slide up the microphone, please.

5 1:36:47

MR. ZANGENEH: May I inquire, Judge?

6 1:36:48

JUDGE HANKINSON: You may.

7 1:36:50

MR. ZANGENEH: Could you please introduce yourself to the members of the jury?

8 1:36:53

JOHN SAWICKI: My name is John Sawicki, S-A-W-I-C-K-I.

9 1:36:57

MR. ZANGENEH: And that's J-O-H-N or J-O-N?

10 1:36:58

JOHN SAWICKI: J-O-H-N.

11 1:37:00

MR. ZANGENEH: Can you tell the members of the jury how you're employed?

12 1:37:04

JOHN SAWICKI: I'm a forensic computer scientist and an electronic evidence consultant.

13 1:37:08

MR. ZANGENEH: What does that mean?

14 1:37:10

JOHN SAWICKI: Essentially what that means is I dig through computers, cell phones, cell phone records, attempt to determine what the user's done with the device, document what I find, and prepare to testify about it later.

15 1:37:23

MR. ZANGENEH: Do you spend any time conducting research with regards to cell tower analysis?

16 1:37:29
17 1:37:31

MR. ZANGENEH: How long have you been employed in this manner?

18 1:37:31

JOHN SAWICKI: I started my company in 2011. I left my law practice to do this full-time in 2013.

19 1:37:40

MR. ZANGENEH: So before you became an expert in this field, or someone that testifies with regards to this field, you were an attorney?

20 1:37:48

JOHN SAWICKI: I was, yes.

21 1:37:51

MR. ZANGENEH: And how long were you an attorney?

22 1:37:53

JOHN SAWICKI: I spent about seven or eight years practicing mostly labor and employment litigation.

23 1:37:57

MR. ZANGENEH: Not criminal defense?

24 1:37:59

JOHN SAWICKI: Not criminal defense, except for maybe a rare case.

25 1:37:59

MR. ZANGENEH: Are you admitted to practice law in the State of Florida?

26 1:37:59
27 1:37:59

MR. ZANGENEH: Do you have any other special licenses?

28 1:37:59

JOHN SAWICKI: I have a private detective's license in Georgia, and before that I spent nine years with the Douglas County, Oregon Sheriff's Office.

29 1:37:59

MR. ZANGENEH: So law enforcement, private investigator, attorney — and now this is what you do. Now you testify with regards to this specialty?

30 1:37:59

JOHN SAWICKI: Yes, sir.

31 1:37:59

MR. ZANGENEH: What kind of education do you have?

32 1:37:59

JOHN SAWICKI: I have an undergraduate degree from George Fox University in management and human resources.

33 1:38:33

JOHN SAWICKI: I have a law degree from Florida State University.

34 1:38:36

JOHN SAWICKI: I have a graduate certificate in computer forensics from the University of Central Florida.

35 1:38:41

JOHN SAWICKI: I have a master's degree in digital forensics from the University of Central Florida.

36 1:38:46

MR. ZANGENEH: In addition to those degrees, do you have any specialized training in the field that you work in?

37 1:38:46

JOHN SAWICKI: Yeah, I have somewhere in the neighborhood of six to seven hundred hours of specialized training in computer forensics applications, interpreting cell tower records, how cell phone networks operate.

38 1:39:03

MR. ZANGENEH: Do you have any training specifically in the area of cell tower analysis?

39 1:39:07
40 1:39:07

MR. ZANGENEH: Can you tell the members of the jury what this training is?

41 1:39:10

JOHN SAWICKI: Yeah, I've had training from a company called AccessData in how cell call detail records work, how to interpret them; training from a company called Terracom Training Institute, again on how cell tower networks function and operate.

42 1:39:38

JOHN SAWICKI: Took a course from a company called PATech in how to map cell calls, cell tower activity. I've done graduate-level coursework in the area of radio frequency engineering through the University of California San Diego's extension program.

43 1:39:38

MR. ZANGENEH: And how many cases have you been involved in involving cell tower analysis?

44 1:39:38

JOHN SAWICKI: Somewhere in the neighborhood of six or seven hundred.

45 1:39:38

MR. ZANGENEH: And have they all been criminal cases?

46 1:39:58

JOHN SAWICKI: No, they have not. We've started using cell tower analysis in civil cases as well.

47 1:40:02

MR. ZANGENEH: Have you ever given expert testimony in this area?

48 1:40:05

JOHN SAWICKI: I have, probably 50 or 60 times.

49 1:40:08

MR. ZANGENEH: And does that mean that you've testified 50 or 60 times?

50 1:40:11

JOHN SAWICKI: Somewhere in that range. I don't have a complete log, but it's in that neighborhood.

51 1:40:11

MR. ZANGENEH: And these testimonies are in state or federal court?

52 1:40:21

JOHN SAWICKI: State and federal court, in states across the country.

53 1:40:25

MR. ZANGENEH: How many of the Florida judicial circuits have you given expert testimony in at this point?

54 1:40:32

JOHN SAWICKI: I believe 15.

55 1:40:32

MR. ZANGENEH: And how many are there in total?

56 1:40:34

JOHN SAWICKI: There are 20.

57 1:40:34

MR. ZANGENEH: So 15 out of 20.

58 1:40:35

JOHN SAWICKI: Yes, sir.

59 1:40:37

MR. ZANGENEH: And what circuit are we in here?

60 1:40:39

JOHN SAWICKI: This would be the Second Judicial Circuit.

61 1:40:40

MR. ZANGENEH: And how many times have you testified in the Second Judicial?

62 1:40:43

JOHN SAWICKI: A handful.

63 1:40:48

MR. ZANGENEH: How many cases on your caseload are criminal versus civil, percentage-wise?

64 1:40:52

JOHN SAWICKI: It fluctuates depending on the particular time, but at this point probably 60 or 70% are criminal.

65 1:40:59

MR. ZANGENEH: Have you presented any training courses in this area of expertise that you have?

66 1:41:14

JOHN SAWICKI: I have. I routinely provide continuing legal education training to judges and lawyers throughout Florida and Georgia in how cell tower networks operate, how electronic devices store data, and how to extract that data.

67 1:41:17

MR. ZANGENEH: Your Honor, at this time I will tender Mr. Sawicki as an expert witness.

68 1:41:22

JUDGE HANKINSON: Any voir dire?

69 1:41:23

MS. NORRIS: No, Judge.

70 1:41:24

JUDGE HANKINSON: All right.

71 1:41:25

MR. ZANGENEH: Okay. So you're familiar with this case, correct?

72 1:41:31
73 1:41:32

MR. ZANGENEH: And my firm has retained you with regards to your expertise in this field, correct?

74 1:41:37

JOHN SAWICKI: Yes, sir.

75 1:41:37

MR. ZANGENEH: And my firm represents Mr. Garcia, correct?

76 1:41:37

JOHN SAWICKI: Yes, sir.

77 1:41:43

MR. ZANGENEH: Okay. So you've gotten all the calls and the iCloud stuff and all the other data that the jury's seen today, correct?

78 1:41:52

JOHN SAWICKI: I don't know what the jury's seen today, but I've certainly had the opportunity to review a vast amount of data.

79 1:41:57

MR. ZANGENEH: And it's a lot of stuff, right?

80 1:41:59

JOHN SAWICKI: There's a lot of material.

81 1:42:00

MR. ZANGENEH: Okay. So you're aware that there's a defendant in this case named Luis Rivera, correct?

82 1:42:06

JOHN SAWICKI: Yes, sir.

83 1:42:07

MR. ZANGENEH: And you're aware that there is — I don't know if I call him a target or a person of interest — but you know who Charlie Adelson is, correct?

84 1:42:16

JOHN SAWICKI: Yes, sir.

85 1:42:17

MR. ZANGENEH: Okay. Do you know what kind of phone Luis Rivera had?

86 1:42:20

JOHN SAWICKI: I understand he had an iPhone.

87 1:42:22

MR. ZANGENEH: And when I'm talking about what kind of phone he had, I mean during the relevant portion of this case, from June 2014 till, let's say, July 2014.

88 1:42:32

JOHN SAWICKI: Yes, sir. So Luis Rivera had an iPhone, as I understand it.

89 1:42:32

MR. ZANGENEH: And what about Charlie Adelson — do you know what kind of phone he had?

90 1:42:39

JOHN SAWICKI: I understand he had an iPhone as well.

91 1:42:41

MR. ZANGENEH: And how would you know this? How do you get this information?

92 1:42:43

JOHN SAWICKI: From the records that I've reviewed.

93 1:42:43

MR. ZANGENEH: Okay. And from the records you reviewed, can you tell the members of the jury — they both had AT&T, correct? Or at least I know Luis Rivera had AT&T, correct?

94 1:42:43

JOHN SAWICKI: I believe they both had AT&T, yes.

95 1:42:43

MR. ZANGENEH: And when you get certain information from subpoenas from AT&T, do they provide this information to you — what kind of phone was used?

96 1:42:43

JOHN SAWICKI: They do. There's a series of records that you get in response to subpoenas or search warrants that the government did in this case. You get subscriber records, which would indicate who an account holder would be, when the account was established, potentially the address for the individual.

97 1:43:24

JOHN SAWICKI: You also get call detail reports that list different activities on the phone — in the case of AT&T it could be phone calls, SMS and MMS text messages, and data records as well.

98 1:43:44

MR. ZANGENEH: So, with regards to iPhones, do iPhones have the ability to make a call or to send a message that would not show up on a call detail report?

99 1:43:53

JOHN SAWICKI: They do.

100 1:43:54

MR. ZANGENEH: Okay. Okay, explain to the members of the jury how something like this would happen.

101 1:43:58

JOHN SAWICKI: So the call detail record essentially shows the transactions I was just talking about — the phone calls and the text messages. It also shows the data, but that's like one big bucket, so you don't get to see every individual piece that's within it.

102 1:44:11

JOHN SAWICKI: But the phone is able to use a variety of different messaging platforms, calling platforms, that will never actually show on a call detail report as a phone call or as a text message.

103 1:44:24

MR. ZANGENEH: Have you reviewed the iCloud extraction for Charlie Adelson?

104 1:44:29

JOHN SAWICKI: I have.

105 1:44:33

MR. ZANGENEH: And when did you do that?

106 1:44:35

JOHN SAWICKI: Most recently over the weekend.

107 1:44:38

MR. ZANGENEH: This current — this last weekend?

108 1:44:39

JOHN SAWICKI: Yes, sir.

109 1:44:40

MR. ZANGENEH: And did you find any evidence of deleted material in Charlie Adelson's iCloud?

110 1:44:45

JOHN SAWICKI: I did.

111 1:44:47

MR. ZANGENEH: What does that mean?

112 1:44:48

JOHN SAWICKI: So there's really two different components to deleted material.

113 1:44:53

JOHN SAWICKI: The first piece — let me take a step back. The iCloud shows material from the phone that's been backed up to the cloud, somebody else's server across the internet.

114 1:45:04

JOHN SAWICKI: And so in this case it happens to be Apple's server, and Apple stores those backups. That's kind of like taking a snapshot of the phone throughout time. In this particular iCloud backup, we can actually see that there is deleted material that's been marked as deleted, both in the areas of phone calls and text messages.

115 1:45:23

MR. ZANGENEH: Are you able to show other deletions that aren't detailed in the iCloud data?

116 1:45:27

JOHN SAWICKI: We can. One of the ways we can do that is we can look to areas where we know how many particular events occurred and see if that matches with the number of events that are shown within the iCloud report.

117 1:45:42

JOHN SAWICKI: So for example, within the iCloud report, we see SMS messages and MMS messages. We also see those within the call detail report.

118 1:46:00

MR. ZANGENEH: Are we talking about anyone in particular in this case? This is still Charlie Adelson, correct?

119 1:46:00

JOHN SAWICKI: We're speaking in general about AT&T and iCloud, but specifically for Mr. Adelson, we can see that as well.

120 1:46:09

MR. ZANGENEH: Was there a specific example on Mr. Adelson's iCloud account that you could tell the members of this jury which highlighted these deletions?

121 1:46:18

JOHN SAWICKI: Yeah. We were able to compare SMS and MMS messages for particular periods of time. And I think there were two different sets of call detail reports that I looked at, to compare the call detail report to the iCloud information to see what was actually there.

122 1:46:32

JOHN SAWICKI: And what we saw was a significant number of messages that appeared within the call detail report that didn't show up within the iCloud information.

123 1:46:42

MR. ZANGENEH: So that means that there is a record of an actual event taking place, right?

124 1:46:48

JOHN SAWICKI: Yes, sir.

125 1:46:48

MR. ZANGENEH: And so iCloud is like — and you described this to me the other day, so I want you to describe it to the members of the jury, because I didn't understand how iCloud works. Can you tell the members of the jury how iCloud keeps track of your data?

126 1:47:01

JOHN SAWICKI: So the iCloud data is essentially your phone automatically backing itself up to a computer remotely, and it does this — however it's set up — at regular intervals, or when you force it to do so. And so you effectively get a number of different snapshots of what it looks like across time.

127 1:47:01

MR. ZANGENEH: So let me ask you a question. So if an iPhone — let's say Charlie Adelson's iPhone — backs up at nine o'clock, okay, and let's say from one o'clock to nine o'clock is when it does its data retrieval, and someone sends a message at four o'clock and then deletes it, would it be part of the call detail report?

128 1:47:41

JOHN SAWICKI: It should be part of the call detail report if it's sent as a text message.

129 1:47:44

MR. ZANGENEH: Would it be in the iCloud?

130 1:47:45

JOHN SAWICKI: Not necessarily.

131 1:47:47

JOHN SAWICKI: It could show in a couple of different ways. It could show — well, actually, I take that back. It'll only show in one way. It could show as deleted.

132 1:47:55

JOHN SAWICKI: If it's still sitting within the database, within the phone for text messages at the time that it backs up, it could still show as a deleted text message. Or if it's been overwritten from that point, it won't show up at all.

133 1:47:55

MR. ZANGENEH: Well, what about — but let me give you — I know that we talked about this. Let's tell the members of the jury what you found out when you ran an analysis between May 1st of 2014 and June 20th of 2014 for Charlie Adelson. Do you remember how many messages were on his phone using SMS and MMS?

134 1:48:26

JOHN SAWICKI: If I could look at my notes.

135 1:48:28

MR. ZANGENEH: Of course you can.

136 1:48:39

JOHN SAWICKI: Let me — for the call detail report from May 1st to June 20th, there were 3,084 SMS and MMS messages. Within the iCloud, there were 1,241.

137 1:48:39

MR. ZANGENEH: So let me — I'm terrible with math, so let me go to my calculator here. So there were 3,084 messages and 1,084 of them appeared. That means there were 1,800 messages that were sent that don't appear in the iCloud documentation.

138 1:49:13

JOHN SAWICKI: That's correct.

139 1:49:14

MR. ZANGENEH: That's more than half.

140 1:49:17

JOHN SAWICKI: It appears that way.

141 1:49:17

MR. ZANGENEH: Now, did you review any other time period? I mean, obviously, you know, between May 1st and June 20th is kind of the beginning phases of this conspiracy, coming up to a relevant portion of this conspiracy. You're aware of that, correct?

142 1:49:35

JOHN SAWICKI: Yes, sir.

143 1:49:36

MR. ZANGENEH: Well, did you review any other time periods to see if this was a consistent thing that Mr. Adelson did?

144 1:49:41

JOHN SAWICKI: I reviewed a second set of call detail reports from Mr. Adelson, from June 18th of '14 through July 18th of '14.

145 1:49:49

MR. ZANGENEH: And during your review, how many — could you tell me — I'm sorry, how many messages were sent via SMS and MMS?

146 1:49:57

JOHN SAWICKI: The call detail reports show 1,587 messages sent.

147 1:50:01

MR. ZANGENEH: From Charlie?

148 1:50:03

JOHN SAWICKI: Yes, sir. Well, sent or received.

149 1:50:06

MR. ZANGENEH: Okay, sent or received.

150 1:50:08

MR. ZANGENEH: How many of those appeared in the Cellebrite extraction?

151 1:50:11
152 1:50:14

MR. ZANGENEH: So 1,587 minus 789.

153 1:50:28

MR. ZANGENEH: 1,587 minus 789. So that means that 798 of those messages are gone. Almost half.

154 1:50:38

JOHN SAWICKI: It's a significant number.

155 1:50:40

MR. ZANGENEH: And is there any way to account for what those messages said or who they were sent to?

156 1:50:47

JOHN SAWICKI: There's not.

157 1:50:47

MR. ZANGENEH: Can you explain this difference there?

158 1:50:55

JOHN SAWICKI: All I can say is it's not in the iCloud backup when that was created. So it could have been deleted, it could have — there could have been some other reason it didn't back up to the cloud. But all we know is it wasn't captured.

159 1:51:09

MR. ZANGENEH: Have you seen the iCloud data for Luis Rivera?

160 1:51:13

JOHN SAWICKI: I have not.

161 1:51:14

MR. ZANGENEH: What about Katie Magbanua?

162 1:51:20

JOHN SAWICKI: I've seen minimal iCloud data for Ms. Magbanua.

163 1:51:24

MR. ZANGENEH: Have you reviewed Katie Magbanua's cell tower usage for the morning of July 19th, 2014?

164 1:51:30

JOHN SAWICKI: I have.

165 1:51:32

MR. ZANGENEH: Did your review of Mr. Adelson's iCloud — during your review, pardon me, of Mr. Adelson's iCloud account, did you find evidence of other communication platforms?

166 1:51:41

JOHN SAWICKI: I did.

167 1:51:42

MR. ZANGENEH: Was there evidence that he had a messaging app called WhatsApp?

168 1:51:47

JOHN SAWICKI: There was.

169 1:51:47

MR. ZANGENEH: What about Threema?

170 1:51:49

JOHN SAWICKI: There was.

171 1:51:50

MR. ZANGENEH: And FaceTime?

172 1:51:52

JOHN SAWICKI: Yes, sir.

173 1:51:53

MR. ZANGENEH: So is it possible that Charlie Adelson communicated directly with Luis Rivera?

174 1:51:58

JOHN SAWICKI: I can't exclude that possibility.

175 1:52:00

MR. ZANGENEH: And that's based on the fact that he had these other messaging apps, correct?

176 1:52:03

JOHN SAWICKI: Yes, sir.

177 1:52:05

MR. ZANGENEH: Have you reviewed Ms. Magbanua's phone records?

178 1:52:07

JOHN SAWICKI: I have.

179 1:52:09

MR. ZANGENEH: And were you able to identify the towers her phone used at the time the government suggested that she was in Jessica Rodriguez's apartment on, I believe, July 19th, 2014?

180 1:52:21

JOHN SAWICKI: I was.

181 1:52:22

MR. ZANGENEH: Where are those towers located?

182 1:52:24

JOHN SAWICKI: The tower that I understand the government believes — well, the call detail report indicates she was using between 10:02 and 10:32 on the morning of the 19th.

183 1:52:36

JOHN SAWICKI: The tower is located about two-thirds of a mile southeast of Ms. Rodriguez's home, right on Biscayne Boulevard.

184 1:52:45

MR. ZANGENEH: And is that tower located in between Charlie Adelson's address in Broward and Ms. Magbanua's residence in Miami Beach?

185 1:52:54

JOHN SAWICKI: I believe it is, yes.

186 1:52:54

MR. ZANGENEH: And have you ever been to Miami?

187 1:52:54

JOHN SAWICKI: I have.

188 1:53:00

MR. ZANGENEH: Would you disagree that Biscayne Boulevard is one of the most common travel routes in South Florida, for Miami?

189 1:53:10

JOHN SAWICKI: I can't speak to most common, but it is a heavily traveled street.

190 1:53:13

MR. ZANGENEH: Now let me ask you a question with regards to the antennas on that tower. How has Sprint identified the antennas on that tower?

191 1:53:25

JOHN SAWICKI: There's actually two sets of antennas on the tower.

192 1:53:28

MR. ZANGENEH: I'm sorry, let me ask you that — I forgot to ask you: Ms. Magbanua's phone is with the Sprint network, correct?

193 1:53:33

JOHN SAWICKI: That's correct.

194 1:53:33

MR. ZANGENEH: Okay. And so how does Sprint identify the antennas on that tower?

195 1:53:38

JOHN SAWICKI: There are actually two sets of antennas on the tower, which basically overlap one another.

196 1:53:44

JOHN SAWICKI: They've numbered the two sets as 7740 and 6740.

197 1:53:49

MR. ZANGENEH: Okay. How are these antennas laid out?

198 1:53:51

JOHN SAWICKI: So it's not unlike a typical cell structure, in that we do have three antennas.

199 1:53:59

JOHN SAWICKI: Now, while many cell structures are laid out with each of those focused at 120-degree angles from one another, so that you would have one at zero degrees, one at 120 degrees, one at 240 degrees, these are shifted slightly.

200 1:54:15

MR. ZANGENEH: And do you know what they are?

201 1:54:15

JOHN SAWICKI: If I could refer to my notes.

202 1:54:18

MR. ZANGENEH: Yeah, please.

203 1:54:19

MR. ZANGENEH: So normally it's 0, 120, and 240, correct?

204 1:54:25

JOHN SAWICKI: Correct. In this case it's 10 degrees, 200 degrees, and 260 degrees.

205 1:54:32

JOHN SAWICKI: So they've shifted them slightly.

206 1:54:34

MR. ZANGENEH: Do you know why the antennas aren't at the optimal 120-degree angle?

207 1:54:39

JOHN SAWICKI: Well, in this case you have a highly traveled street which runs right next to the antenna, so it would make sense if they were shifted to increase the capacity.

208 1:54:50

JOHN SAWICKI: Antenna 1, which we do to the north, is pointed slightly to the northeast, so it essentially points right down Biscayne Boulevard. The other two antennas, which are pointing to the southeast and the southwest — frankly, they're both pointing to the southwest slightly — have been shifted so they would shoot down the south of Biscayne Boulevard. Essentially what it does is it creates additional coverage in the area.

209 1:55:13

MR. ZANGENEH: And this is the area between Ms. Magbanua's residence and Charlie Adelson's residence?

210 1:55:18

JOHN SAWICKI: Yes, sir.

211 1:55:18

MR. ZANGENEH: Now, were you able to determine the frequency of how often Ms. Magbanua's phone used that tower between May of 2014 and September of 2015?

212 1:55:33

JOHN SAWICKI: Yeah, approximately 1,100 times that her phone used that cell tower.

213 1:55:38

MR. ZANGENEH: So do you have a percentage of the amount of time that her phone was being used?

214 1:55:45

JOHN SAWICKI: Yeah, it's about 11.5% of the overall antenna usage that they were able to track. And what I mean by that is there's a number of calls for which Sprint hasn't recorded the antenna that's actually being used. So for those that they're actually able to establish a tower, about 11.5% — it was actually the third most used tower.

215 1:56:15

MR. ZANGENEH: So about a little over 10% of her phone's Correct? All right, it marks off with that cell tower.

216 1:56:38

MR. ZANGENEH: I have no further questions of Mr. Sawicki, thank you.

217 1:56:39

MR. DECOSTE: Good afternoon.

218 1:56:46

MR. DECOSTE: What's your name again?

219 1:56:46

JOHN SAWICKI: John Sawicki.

220 1:56:48

MR. DECOSTE: Have we ever met before?

221 1:56:49

JOHN SAWICKI: I can't tell you for sure.

222 1:56:52

MR. DECOSTE: You're not our expert on this case, right?

223 1:56:54

JOHN SAWICKI: No, sir.

224 1:56:55

MR. DECOSTE: You're tied over to Sigfredo Garcia.

225 1:56:58

JOHN SAWICKI: Yes, sir.

226 1:56:59

MR. DECOSTE: Quick question, quick topic.

227 1:57:03

MR. DECOSTE: What is kicking for a tower?

228 1:57:07

JOHN SAWICKI: Kicking — I'm not familiar with that as a technical term. If you're referring to the process of a phone call using a tower other than the immediate tower next to it, I suppose that could be what you're referring to.

229 1:57:21

MR. DECOSTE: It is, yes, and sorry for using the crude language.

230 1:57:24

MR. DECOSTE: Basically, if you could explain to this jury how somebody could be in the vicinity of a tower, be close to a tower within one section, but not communicate.

231 1:57:58

JOHN SAWICKI: Your question kind of anticipates that you would only connect to one tower from a particular location. It's certainly not the case. You could connect to a number of towers from any particular location, depending on where you happen to be in the circumstances at a particular time.

232 1:58:03

JOHN SAWICKI: The cell phone is going to connect to the tower with the strongest, cleanest signal.

233 1:58:09

JOHN SAWICKI: That could be the closest tower.

234 1:58:11

JOHN SAWICKI: It could not be the closest tower. It just depends on all the specifics of the network, of the geography of the area at that particular point in time.

235 1:58:24

MR. DECOSTE: If there were a lot of traffic — and we're not talking about cell phone traffic, we're talking about vehicles — a lot of traffic on somewhere like Biscayne, rush hour, people on the phone, and there's a lot of traffic on one sector of one tower, could that cause somebody to not communicate with that sector and instead communicate with another tower?

236 1:58:48

JOHN SAWICKI: Your question presupposes you would have automatically connected to that tower in the first place. I don't know that that's necessarily the case. If you are suggesting that you've got two towers in one location and, because of network traffic at that point in time, you're unable to connect to cell tower A and instead you connect to cell tower B, that's certainly possible. But regardless of that, you certainly have to be within the range of cell tower B.

237 1:59:14

MR. DECOSTE: And last question — that range, I know it's dependent on specific towers. You can be miles away from a tower and still be communicating with that tower, right?

238 1:59:14

JOHN SAWICKI: Depending on the tower, yes.

239 1:59:25

MR. DECOSTE: And this is not just one or two miles. This can go up to ten or more miles, is that correct?

240 1:59:30

JOHN SAWICKI: Depending on where you're at, absolutely. Absolutely.

241 1:59:32

MR. DECOSTE: One brief second, Your Honor. No further questions.

242 1:59:35
243 1:59:35

MS. NORRIS: Can I have one moment, Your Honor?

244 1:59:53

JUDGE HANKINSON: All right. We'll take ten minutes.

245 1:59:59

JUDGE HANKINSON: Either side, anything?

246 2:00:01

JUDGE HANKINSON: Ten minutes.

247 2:11:37

MS. NORRIS: Thank you, Judge. Good afternoon.

248 2:11:39

JOHN SAWICKI: Good afternoon.

249 2:11:47

MS. NORRIS: I want to start by asking you about the iCloud extraction that you looked at in comparison to the call detail records to determine that there were some messages from the call detail records that did not appear in the iCloud, consistent with having been deleted. Okay?

250 2:11:56

JOHN SAWICKI: Consistent with not being there.

251 2:12:09

MS. NORRIS: When you were using the call detail records to come up with your 3,084 for text messages, SMS or MMS messages, were you just looking at the total numbers of text messages, or the actual content to confirm that they were, in fact, text messages?

252 2:12:21

JOHN SAWICKI: Frankly, that's the overall number, yes.

253 2:12:25

MS. NORRIS: Okay, so that's the... Would you agree that sometimes when a cell phone is powered up, it receives a notification that appears as a text message to alert you that you have a voicemail, for example?

254 2:12:34

JOHN SAWICKI: It could do that occasionally, yes.

255 2:12:36

MS. NORRIS: And that could appear to be a text message, although it's not?

256 2:12:38

JOHN SAWICKI: It could.

257 2:12:39

MS. NORRIS: So those were not excluded from that overall 3,084 number.

258 2:12:44

JOHN SAWICKI: That's true.

259 2:12:44

MS. NORRIS: Did you also look, for that same time period Mr. Zangeneh asked you about, at Katherine Magbanua's call detail records compared to her iCloud messages?

260 2:12:44

JOHN SAWICKI: The copy of the iCloud messages they had for her didn't have content to them, so I wasn't able to compare them.

261 2:12:44

MS. NORRIS: Did you compare the numbers?

262 2:12:44

JOHN SAWICKI: No, I wasn't able to see the messages that were sent, received, so...

263 2:13:10

MS. NORRIS: Despite the fact that some of those text messages did not appear on the iCloud, there was still evidence in Charlie Adelson's iCloud that Charlie Adelson and Katherine Magbanua were communicating.

264 2:13:22

JOHN SAWICKI: That's correct.

265 2:13:23

MS. NORRIS: And numerous of those messages were deleted.

266 2:13:27

JOHN SAWICKI: That's true.

267 2:13:33

MS. NORRIS: With respect to communications between Charlie Adelson or Luis Rivera, you found no evidence that Charlie Adelson communicated with Luis Rivera, did you?

268 2:13:43

JOHN SAWICKI: That's true.

269 2:13:47

MS. NORRIS: How many cell towers are there — cell sites are there — between Charlie Adelson's residence in South Florida and Katherine Magbanua's?

270 2:13:47

JOHN SAWICKI: I didn't count the number of towers, but it's a fair distance, so there's going to be a large number of towers.

271 2:14:00

MS. NORRIS: Would you agree that the towers are closer together in a highly populated area, such as the one relevant to this case?

272 2:14:08

JOHN SAWICKI: Absolutely.

273 2:14:09

MS. NORRIS: Okay, they're not miles and miles apart, these towers, are they?

274 2:14:12

JOHN SAWICKI: That's correct.

275 2:14:13

MS. NORRIS: Specifically with respect to the time period on the morning of July 19, 2014, between 10 — I believe it was 10:02 and 10:32 a.m.?

276 2:14:29

JOHN SAWICKI: Yes, ma'am.

277 2:14:30

MS. NORRIS: we were talking about a cell site or tower that Katherine Magbanua's phone was communicating with.

278 2:14:36

MS. NORRIS: Do you recall those questions?

279 2:14:38

JOHN SAWICKI: Yes, ma'am.

280 2:14:38

MS. NORRIS: You would agree with me that the cell site Katherine Magbanua was communicating with during that time frame on July 19th, 2014 could be consistent with Jessica Rodriguez's house?

281 2:14:51

JOHN SAWICKI: There are certainly intentions.

282 2:14:51

MR. DECOSTE: Objection.

283 2:14:53

JUDGE HANKINSON: Overruled.

284 2:14:54

MS. NORRIS: I'm sorry. Let me ask that again. Do you agree that the cell site Katherine Magbanua's phone is communicating with the morning of July 19th, during that 10:00 to 10:30 time frame, could be consistent with Jessica Rodriguez's house?

285 2:15:08

JOHN SAWICKI: There's certainly activity during that time period that could be, yes.

286 2:15:11

MS. NORRIS: Consistent with the house?

287 2:15:12

JOHN SAWICKI: Yes, ma'am.

288 2:15:24

MS. NORRIS: You mentioned that 11% of the activity for that particular antenna.

289 2:15:30

MS. NORRIS: Do you remember that 11% amount?

290 2:15:32
291 2:15:33

MS. NORRIS: Would that be consistent with Katherine Magbanua being at Jessica Rodriguez's house as an inner friend?

292 2:15:39

JOHN SAWICKI: It could be.

293 2:15:47

MS. NORRIS: One moment, Judge.

294 2:15:48

JUDGE HANKINSON: Can I clarify a point on that? When you say — I think you said 11 and a half percent — are you talking about in usage time or in the number of incidents?

295 2:15:58

JOHN SAWICKI: Your Honor, that's the number of instances.

296 2:16:00
297 2:16:01

MS. NORRIS: I have no further questions, Judge. Thank you.

298 2:16:03
299 2:16:04

MR. ZANGENEH: You heard Ms. Norris ask you if there's any evidence of any activity between Charlie Adelson and Luis Rivera, correct?

300 2:16:17

JOHN SAWICKI: Yes, sir.

301 2:16:18

MR. ZANGENEH: You said no, right?

302 2:16:19

JOHN SAWICKI: Yes, sir.

303 2:16:20

MR. ZANGENEH: And that's because the evidence that you have is the iPhone, the one iPhone that's related to Luis Rivera, correct?

304 2:16:28

MS. NORRIS: Objection. Leading.

305 2:16:28

JUDGE HANKINSON: Sustained.

306 2:16:29

MR. ZANGENEH: How many phones did you make that determination of, that belonged to Luis Rivera?

307 2:16:36
308 2:16:36

MR. ZANGENEH: Were you aware if Luis Rivera had multiple throw phones?

309 2:16:44

JOHN SAWICKI: I understand there's a number of devices that have been connected to him.

310 2:16:51

MR. ZANGENEH: Do you have those phone numbers?

311 2:16:53

JOHN SAWICKI: I don't have them now, no.

312 2:16:53

MR. ZANGENEH: So when Ms. Norris — when the prosecutor — asked you if there's any correlation between Charlie Adelson and Luis Rivera, you don't have all of Luis Rivera's contacts, correct?

313 2:17:08

JOHN SAWICKI: Correct.

314 2:17:16

MR. ZANGENEH: Charlie Adelson had been making FaceTime calls.

315 2:17:21

MR. ZANGENEH: Would there be a record of that in the iCloud?

316 2:17:25

JOHN SAWICKI: There could be.

317 2:17:27

MR. ZANGENEH: Could there potentially not be a record of it if you deleted it right after you did it?

318 2:17:31

JOHN SAWICKI: Correct.

319 2:17:32

MR. ZANGENEH: As someone that testifies with regards to cell usage and telephones in general, are you aware that people that are involved in nefarious activities, like drug dealers or gang members, often use disposable phones?

320 2:17:53

MS. NORRIS: Objection. Lack of foundation and speculation.

321 2:17:54

JUDGE HANKINSON: Overruled.

322 2:17:56

JOHN SAWICKI: I am familiar with that, yes.

323 2:17:58

MR. ZANGENEH: And is that true?

324 2:17:59

JOHN SAWICKI: It is.

325 2:18:00

MR. ZANGENEH: No further questions.

326 2:18:02

JUDGE HANKINSON: All right. Did anyone else have a question of this witness?

327 2:18:04

JUDGE HANKINSON: All right. If not, you may step down. Do we need to keep him further?

328 2:18:10

JUDGE HANKINSON: Anybody need him further?

329 2:18:11

JUDGE HANKINSON: All right. You're excused. Call your next witness.