Skip to content
personpersonCory GaddisCory GaddisGoogle records custodian responsible for responding to legal process and authenticating company records.← All People
Witness· Google

Cory Gaddis

Google records custodian responsible for responding to legal process and authenticating company records.

84 lines·4 proceedings·3 mentions

About

Called by the government on Day 11, Cory Gaddis testified about Google Docs, Sheets, and metadata automatically generated and stored when records are created, accessed, or changed. He described how Google responds to search warrants and produces requested content with associated JSON metadata.

Gaddis explained that he compared files on a thumb drive with Google's original production folders using a hash script. After the defense stated that it had no objection, the court received 18 listed government exhibits; the government did not offer the thumb drive itself. He then used Government Exhibit 44M to explain JSON metadata fields, including Gaia IDs, displayed email-address information, and a June 19, 2022 UTC timestamp. His testimony did not identify who controlled the displayed email accounts.

On cross-examination, the defense tested his ability to interpret the metadata. Gaddis said he believed the view field indicated that a file had been viewed, but qualified that explanation and acknowledged that he was unfamiliar with every field, lacked substantial metadata experience, and was not steeped in the technology. He described his role as responding to search warrants, subpoenas, and court orders rather than serving as a metadata specialist.

Trial Record (4)

FederalFederal Criminal TrialOct 3, 2023 – Nov 2, 2023Called by prosecution

Called by the government on Day 11, Cory Gaddis authenticated Google-produced files and explained metadata fields in Government Exhibit 44M. On cross-examination, he acknowledged limits in his technical familiarity with the metadata.

Day 11

DirectCory Gaddis β€” DirectCory GaddisSamuel Raymond5highlights73lines spoken

Summary

Google records custodian Cory Gaddis explained Google's automatic metadata, authenticated files through a hash check, and supported the admission of 18 exhibits before interpreting selected fields in Government Exhibit 44M.

Highlights (5)

testimony highlightGaddis explained that Google automatically generates and stores metadata about document creation and editing and provides records with associated metadata in response to a search warrant.Open in transcript →
evidence eventGaddis authenticated files placed on a thumb drive, including through a hash script. After the exhibit list was read back and the defense stated it had no objection, the court received all 18 listed government exhibits into evidence; the government did not offer the thumb drive itself.Open in transcript →
Quoteβ€œI ran a hash script on the original zip folders that these filed were provided from.”— Cory GaddisGaddis identified the technical method he used to verify that the files came from Google's original production folders.Open in transcript →
evidence eventUsing Government Exhibit 44M, Gaddis explained Gaia IDs and confirmed displayed email-address, identifier, and timestamp fields, including a Gaia ID ending in 8013 and a June 19, 2022 UTC timestamp.Open in transcript →
Show all 5 highlights
Quoteβ€œIt could be through various emails. So one email may have one Gaia ID and then another email would have a completely different one.”— Cory GaddisGaddis explained why one person could have multiple Google account identifiers and how those identifiers relate to email accounts.Open in transcript →
CrossCory Gaddis β€” CrossCory GaddisChristian R. Everdell3highlightsMentioned11lines spoken

Summary

Cory Gaddis acknowledged that his Google duties centered on responding to legal process and that he had limited experience interpreting technical metadata fields.

Mentioned in this proceeding.

Highlights (3)

testimony highlightThe defense tested Gaddis's qualifications to interpret metadata, and he acknowledged that he was unfamiliar with some fields and lacked substantial metadata experience.Open in transcript →
Quoteβ€œYes. I'm not super familiar with all the intricacies in all of the fields.”— Cory GaddisGaddis qualified his interpretation of the JSON metadata and acknowledged limits in his familiarity with its fields.Open in transcript →
Quoteβ€œNot particularly any good amount of experience with it.”— Cory GaddisThe answer directly supported the defense's effort to distinguish Gaddis's records-production duties from technical metadata expertise.Open in transcript →