Skip to content
personpersonCory GaddisCory GaddisGoogle records custodian responsible for responding to legal process and authenticating company records.← All People
WitnessGoogle

Cory Gaddis

Google records custodian responsible for responding to legal process and authenticating company records.

84 lines·4 proceedings·3 mentions

About

Cory Gaddis testified for the government on Day 11 about Google Docs, Sheets, and the metadata Google automatically generates and stores when records are created, accessed, or changed. He also described how Google responds to search warrants and produces requested content with associated JSON metadata.

Gaddis explained that he used a hash script to compare files copied to a thumb drive with Google's original production folders. After the defense stated that it had no objection, the court received 18 listed government exhibits; the government did not offer the thumb drive itself. Using Government Exhibit 44M, he explained JSON fields that included Gaia IDs, displayed email-address information, and a June 19, 2022 UTC timestamp. His testimony did not establish who controlled the displayed email accounts.

On cross-examination, the defense tested the limits of Gaddis's ability to interpret the metadata. He said he believed the view field indicated that a file had been viewed, but qualified that interpretation and acknowledged that he was unfamiliar with every field, had limited metadata experience, and was not steeped in the technology. He described his Google role as responding to search warrants, subpoenas, and court orders rather than serving as a metadata specialist.

Trial Record (4)

FederalFederal Criminal TrialOct 3, 2023 – Nov 2, 2023Called by prosecution

Cory Gaddis authenticated Google-produced files and explained metadata fields in Government Exhibit 44M during the government's Day 11 presentation. On cross-examination, he acknowledged limits in his technical familiarity with the metadata.

Day 11

DirectCory Gaddis β€” DirectCory GaddisSamuel Raymond5highlights73lines spoken

Summary

Google records custodian Cory Gaddis explained Google's automatic metadata, authenticated files through a hash check, and supported the admission of 18 exhibits before interpreting selected fields in Government Exhibit 44M.

Highlights (5)

testimony highlightGaddis explained that Google automatically generates and stores metadata about document creation and editing and provides records with associated metadata in response to a search warrant.Open in transcript →
evidence eventGaddis authenticated files placed on a thumb drive, including through a hash script. After the exhibit list was read back and the defense stated it had no objection, the court received all 18 listed government exhibits into evidence; the government did not offer the thumb drive itself.Open in transcript →
Quoteβ€œI ran a hash script on the original zip folders that these filed were provided from.”— Cory GaddisGaddis identified the technical method he used to verify that the files came from Google's original production folders.Open in transcript →
evidence eventUsing Government Exhibit 44M, Gaddis explained Gaia IDs and confirmed displayed email-address, identifier, and timestamp fields, including a Gaia ID ending in 8013 and a June 19, 2022 UTC timestamp.Open in transcript →
Show all 5 highlights
Quoteβ€œIt could be through various emails. So one email may have one Gaia ID and then another email would have a completely different one.”— Cory GaddisGaddis explained why one person could have multiple Google account identifiers and how those identifiers relate to email accounts.Open in transcript →
CrossCory Gaddis β€” CrossCory GaddisChristian R. Everdell3highlightsMentioned11lines spoken

Summary

Cory Gaddis acknowledged that his Google duties centered on responding to legal process and that he had limited experience interpreting technical metadata fields.

Mentioned in this proceeding.

Highlights (3)

testimony highlightThe defense tested Gaddis's qualifications to interpret metadata, and he acknowledged that he was unfamiliar with some fields and lacked substantial metadata experience.Open in transcript →
Quoteβ€œYes. I'm not super familiar with all the intricacies in all of the fields.”— Cory GaddisGaddis qualified his interpretation of the JSON metadata and acknowledged limits in his familiarity with its fields.Open in transcript →
Quoteβ€œNot particularly any good amount of experience with it.”— Cory GaddisThe answer directly supported the defense's effort to distinguish Gaddis's records-production duties from technical metadata expertise.Open in transcript →