DugganUSA LLC is a cybersecurity company based in Minnesota that builds AI-powered threat intelligence tools. Our platform indexes over 1 million indicators of compromise (IOCs), 400,000+ DOJ Epstein documents, and provides a free STIX 2.1 threat feed consumed by Fortune 500 companies and defense contractors.

Butterbot is DugganUSA's AI-powered security chatbot with 40+ tools for searching IOCs, correlating threat indicators, traversing threat graphs, analyzing behavioral patterns, and running CARVER risk assessments. It uses OpenAI function calling with Meilisearch-backed indexes.

What is AIPM (AI Presence Management)?

AIPM is a tool that audits how AI models (GPT, Claude, Gemini, Perplexity) perceive and recommend your brand. It calculates an AIPM-NPS score by directly querying AI models, analyzes your website structure for AI crawler readiness, and provides optimization recommendations. Think 'SEO for the LLM era.'

Is the Epstein Files search free?

Yes. The Epstein Files Search at epstein.dugganusa.com offers a free tier with 500 queries per day. It covers all 12 DOJ EFTA datasets (400K+ documents), 2M+ ICIJ offshore entities, and 2M+ federal decisions. Professional and enterprise tiers are available for researchers and journalists needing higher limits.

Who founded DugganUSA?

DugganUSA was founded by Patrick Duggan on December 1, 2025, in Minnesota. Patrick's background includes Dell EMC, Palo Alto Networks, and embedded work at Microsoft on JEDI/Azure Stack. The company's D-U-N-S number is 14-363-3562.

What is the DugganUSA STIX feed?

DugganUSA operates a free STIX 2.1 threat intelligence feed at analytics.dugganusa.com/api/v1/stix-feed. It contains 1M+ indicators of compromise including botnet C2s, malicious IPs, and attack infrastructure. The feed is TAXII 2.1 compliant and is consumed by major organizations including Microsoft, AT&T, Amazon, and defense contractors.

Epstein Files: The Hidden Names in the Metadata

Patrick Duggan
Feb 1
3 min read

# Epstein Files: The Hidden Names in the Metadata

**Published:** February 1, 2026

**Author:** DugganUSA Threat Intelligence

TL;DR

The DOJ scrubbed the PDFs before release, but forgot to scrub the Excel files. We found FBI agent names, prosecutor usernames, and a 2002 video the government says "produced no images" - but the file exists with full metadata showing it came from a Canon camcorder.

What Metadata Reveals

When the DOJ released 3+ million pages of Epstein files, they processed the PDFs through OmniPage - a document scanning tool that strips original metadata. Smart move.

But they released native Excel spreadsheets without the same treatment. And Excel files contain author information, modification history, and company attribution.

Who Created the FBI Subpoenas Spreadsheet?

**Document:** EFTA00023539.xlsx

This spreadsheet tracks subpoenas to financial institutions - the exact document where co-conspirator names were redacted (replaced with blank cells). The file properties reveal:

| Field | Value |

|-------|-------|

| **Creator** | LUBIN, MARK M (NY) (FBI) |

| **Created** | August 16, 2019 |

| **Company** | Federal Bureau of Investigation |

FBI Special Agent Mark M. Lubin (NY Field Office) created the master subpoena tracking spreadsheet. He's the one who knew which names were in those blank cells before they were scrubbed.

The "mcomey" Username

**Document:** EFTA00018595.xlsx (Maxwell's Seized Devices)

This spreadsheet catalogs every device seized from Ghislaine Maxwell - iPads, iPhones, hard drives. The file creator:

| Field | Value |

|-------|-------|

| **Creator** | mcomey |

| **Company** | US Attorneys Office |

| **Comments** | Flatley, Stephen R. |

"mcomey" appears to be **Maurene Comey** - Assistant U.S. Attorney on the Maxwell prosecution team.

Yes, that Comey. Maurene Comey is the daughter of former FBI Director James Comey.

The same James Comey who was FBI Director when Epstein's 2008 non-prosecution agreement was still in effect. The same James Comey who was fired by Trump in 2017.

His daughter prosecuted Maxwell. We found her username in the file metadata.

The 2002 Canon Camcorder Video

**Document:** EFTA00003212.avi

The DOJ's production notes say this video "Produced No Images" - meaning they claim it contains nothing relevant. But the native file exists and has full metadata:

| Field | Value |

|-------|-------|

| **Date/Time Original** | February 20, 2002, 01:23:49 |

| **Software** | CanonMVI01 (Canon camcorder) |

| **Duration** | 4.3 seconds |

| **Resolution** | 320x240 |

| **Format** | OpenDML AVI |

The file is 4.3 seconds of 320x240 video from a Canon camcorder, timestamped February 2002. That's during the peak of Epstein's alleged trafficking operation.

The DOJ says it "produced no images." The file exists. We have the metadata. What's on the video?

Other Names in File Properties

Across the Excel files in the release, we found:

- **Flatley, Stephen R.** - Left comments in Maxwell device spreadsheet

- **SDrescher** - Modified device tracking documents

- **Boswell, Constance R.** - CACI contractor, modified FBI spreadsheets

- **skochevar** - Modified FBI investigation spreadsheets

- **KC** - Initials only, modified multiple documents

These are the people who handled the evidence before release. Their digital fingerprints remain.

What the DOJ Scrubbed vs. What They Missed

**Scrubbed:**

- PDF metadata (processed through OmniPage)

- Image EXIF data (GPS coordinates stripped)

- Original document authors on PDFs

**Left Behind:**

- Excel file authors and companies

- Excel file comments

- Video file metadata and timestamps

- Excel revision comments (though not full history)

Why This Matters

1. **FBI Agent Names**: We now know who created the subpoena tracking spreadsheet where co-conspirator names were redacted. These agents can be FOIA'd directly.

2. **Comey Connection**: James Comey's daughter prosecuted Maxwell. This isn't a scandal - she's a qualified AUSA. But it's notable context for the "belongs to intelligence" narrative.

3. **The 2002 Video**: A Canon camcorder video from February 2002 exists in the files. The DOJ says it contains nothing. The metadata says otherwise. Someone should FOIA the actual video content.

4. **Contractor Access**: CACI International (defense/intelligence contractor) employees modified FBI spreadsheets. Government contractors had access to the evidence.

Methodology

All metadata extracted using exiftool on native files from the DOJ EFTA release. Excel file properties extracted from docProps/core.xml within the OOXML structure.

Search all 44,886 documents: https://analytics.dugganusa.com/api/v1/search?q=YOUR_QUERY&indexes=epstein_files

*This analysis was performed using the DugganUSA Threat Intelligence Platform. All EFTA document IDs are publicly verifiable through the DOJ's official release.*

*Her name was Renee Nicole Good.*

*His name was Alex Jeffery Pretti.*