More than 1 million files were deleted between November 1st 2020 and March 16th 2021.

There we three time periods in which election-related files were deleted.

20 Mg data limit, first data in is first to be overwritten.

On March 3, 2021, 37,000 files were overwritten.
On April 12, 330 log entries were overwritten.

CLEAR INTENTIONAL OVERWRITING OF SECURITY LOGS ON THESE MACHINES.

Cotton says they have identified the individuals who deleted the log files.

They know the identities of the people who intentionally, MANUALLY deleted all security logs & all records of the Election results ONE DAY before the audit.

They know the names. 👇

Deletion of the log files the day before the data was to be turned over to auditors suggests willful misconduct. But since the admin IDs and passwords were shared, pinpointing an indidual is tricky.

We have the screenshots of the people who were at the machines at the times the machines were tampered with.

I can now predict that if the AG does his job properly, someone is going to jail.

THERE IS NOW NO DENYING THE ELECTION IN ARIZONA WAS FRAUDULENT; IT MUST BE DECERTIFIED.

Whoa

Cotton: "There are hundreds of anonymous logins."

Why are users logging in anonymously?

Lots of suspicious DNS setting enabled- settings that connect to the outside world.

These were supposed to be isolated machines. Under legit circumstances theres ZERO need for connection to the internet.

What IPs was it reaching out to?

When booted, the EMS System attempted to connect to the internet, despite the County's claims that the system does not connect to the internet.

Destruction of data. This is a felony under Arizona law. Destruction of Evidence?

The County's auditors claimed they found no internet history. CyFIR found significant internet history. in unallocated disc space.

One EMS system connection to the internet happened on February 1, 2021, which coincides with the beginning of the audit and a purge of thousands of files.