Election Crime Bureau

Made possible by the Lindell Offense Fund

EMS Server Internet History & Enabled Remote Services (AZ)

Established Fact

Forensic analysis of the Maricopa County EMS server and client workstations revealed 59 open ports at boot, active IPv6, and enabled Terminal Services and Remote Access features. Unallocated hard drive space yielded artifacts of internet connections to public URLs and foreign entities on devices officials represented as strictly air-gapped. The audit team found the Windows security event log was configured to auto-overwrite, with the earliest retained log dated February 5, 2021 – meaning no Election Day 2020 logs were preserved.

Citations

Arizona Senate Audit Presentation: Deleted Election Files: https://www.scribd.com/document/898198781/Senate-Presentation-4-30-22 | Scribd

SLI Compliance Forensic Audit Report – Maricopa County: https://www.maricopa.gov/DocumentCenter/View/66843/SLI-Compliance-Forensic-Audit-Report?bidId= | Maricopa.gov