UNCLASSIFIED - Electronic Frontier Foundation · 2010. 9. 8. · which sits on the Informatio...

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

SËpRÔ

ALL INFOPHATION COHTAIHED HEREIN IS UNCLASSIFIED DATE 04-09-2009 BY 60322 UC/LP/STP/JCF

From: Sent: To:

Cc: Subject: RE: ORCON EC

UNCLASSIFIED NON-RECORD

b6 AAAAAAAUGH!!! b7c

Asking the Security Division if we should be more restrictive is like asking an ice cream salesman if we should buy ice cream.

The intent of the EC is evident both from its provenance and from the "Synopsis". The EC is from Dl's Issues Group, which sits on the Information Sharing Policy Group (not the Information Restricting Policy Group, which, I believe, is somewhere deep in the bowels of the Security Division). The Synopsis explains that the Dl is trying to "right a wrong" that is harming the FBI's information sharing efforts: "the fact that many texts which should be widely circulated among the community of investigators and analysts are currently marked ORCON."

If the result of this EC is that the FBI starts restricting more information, that would be entirely the OPPOSITE of what the EC calls for.

Normally I agree with you,I I but if you push this any further I'm afraid I'll have to catch the next plane to Washington and submit you to some combination of therapy and Chinese water torture until you come to your senses.

—Original Message— From: | | Sent: 'Thursday. June OB. '¿005 l-.TTPR To:

Cc: Subject: RE: ORCON EC b2 UNCLASSIFIED b 6

NON-RECORD b 7 c

b7D

I see the EC as saying that we should make sure the info is not posted to locations you can get to without a need to know. Red Wolf and! lall have access controls that ensure that compliance.

I guess if no one ever thought it should be on there before, I'm making a mountain out of a pebble. If the general consensus is it's overkill, I will ask Security Division and see what they say; if they think it's not necessary, I will cease and desist.

—Original Message—-From: | | Sent: Thursday. 3une 08. 2006 3:12 PM t o : , - ;

C a C Subject: RE: ORCON EC

148


My suggestion would be that, in this,specific case, ws not takfs thf? initiativfi to rto Romethinn ahsnlutftlv insane unless or until we're told to do that,

J

—-Original Message From: Sent To:

Cc: Sub;

Thursday. June 08. i m 3; to PH.

b2 b6 b7C b7E

ect: RE: ORCON EC


Just trying to comply with marking requirements.

I have never used ORCON, but this EC leads me to believe it should be used.

-Original Message-From: Sent: To:

Cc: Subject:

.HwrgfoY. June os, 2006 3:07 PM

(SUlUäft c RE: ORCON EC


:b6 :b7C

Are we creating an issue where one does not exist?

—Original Message From: r ~ Sent: To:

Thursday, June 08, 2006 1:56 PM



The purpose of the EC is to discourage the use of ORCON and I am very opposed to marking | [ORCON. ^ 1 ;b2

—Original Message' From: Q Sent: To:

Thursday, June 08, 2006 11:26 AM

b6 b7C b7E

Cc: ML

149

ï

Subject: ORCON EC


h 2 h 6 b7C b7E

Since allC 3 have E 3 then as I read this email I am thinking they should all be listed ORCON. We never have done that, although some emails I see from some offices do come with that heading in addition to NOFORN.

Am I understanding correctly that ORCON should be shown on the header for objections?

Any

Standards, Policy, and Metrics (SPAM) Operations Management Unit (OMU) Language Services Section, DI

](again changed number) "SPAM ... CAN!"

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

SËpRÔ

ALL INFORMATION CONTAINED HEREIH IS UNCLASSIFIED

b2 b6 blC b7E

From: Sent: To:



Why would you ask Security?! Don't ask the question if you're afraid to hear the answer. Frankly, I'm afraid to hear the answer.

Original Mereanp From: | 1 Sent: Thursday, June 08, 2006 3:21 PM To:



I see the EC as saving that we should make sure the info is not posted to locations you can get to without a need to know. Red Wolf andl I all have access controls that ensure that compliance..

I guess if no one ever thought it should be on there before, I'm making a mountain out of a pebble. If the general consensus is it's overkill, I will ask Security Division and see what they say; if they think it's not necessary, I will cease and desist.

-Original Message-From: L Sent: Thursday. June 08. 2006 3:12 PM To:



My suggestion would be that, in this specific case, we not take the initiative to do something absolutely insane unless or until we're told to do that. |

1 I 1 :

—Original Message— From: | I Sent; Thursday, June 08, 2006 3:10 PM To: I

Cc: | Subject: RE: ORCON EC

145

ALL INFORMATIOH CONTAINED HEREIN 15 UNCLASSIFIED DATE 04-09-2009 BY 60322 UC/LP/STP/JCF

From: Sent: To:

Cc: Subject:


Thursday .lune PS ?nnfi ¿-K1 PM

ZEBE

RE: ORCON EC b2 b6 b7C •b7E

And remember. ]Red Wolf. If you even say the word ORCON to the Security [jivision. this will open a can of worms that might wreck a great accomplishment. (Not to

lORCON requirement in mind.) mention the fact that Red Woll

—Original Message' From: I Sent: Thursday. June 08. 2006 2:46 PM To:

Cc: Subject:


endorse^ J s sentiments (wouldn't do the torture myself but I WOULD watch!). | J Besides, the issue of defining

"tne "originator" comes up. wno would tnat oev Again, we snouia oe in tne business of promoting the sharing of information, not restricting it.

—Original Message— From: I I Sent: Thursday, June 08. 2006 4:00 PM l a : I

J0£i_ L

X


> > >

> > Subject: RE: ORCON EC > > >

> > AAAAAAAUGHH! > > > > > >

Asking the Security Division if we should be more restrictive is like asking an ice cream salesman if we should buy ice cream.

The intent of the EC is evident both from its provenance and from the "Synopsis". The EC is from DCs Issues Group, which

124

> UNCLASSIFIED

> UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

Ce:

Subject: RE: Urgent need for additional Redwolf Station in:

SBfe&ET

HeyCZl

b2 b6 b7A b7C b7E

There are a lot of problems witH but will try and help you guys.

First of all, I do not believe you have enough space right now to support another Red Wolf workstation, but will sei what we can do. Remember the Red Wolf that you have is a|

over, up if system up there bui |would not al land! has to live with a\

Due to |to give me space ana tight w ¿éttih^ a

Space up there is tight. I was told that the RA, right now, can not supporT~ A/C problems and electrical requirements). Remember, I tried to get! I Red Wolf pvstem up there bui Iwould npt commit, statinp that squad spaces had not been firmed up. The fight is

Thef

I bersonnel problems continue to plaque the Main Office. I believe around twol lemplovees will be leaving I Within the next few months. | |is our major concern. At the present time lean not givel Ihe

support it really needs. I believe we need to have a meeting to discuss all ofl Issues and what we can support.

Thanks.

Original Message-From: Sent: .Mnnrlav liinp 1? PM To: Cc: Subject: Urgent need tor additional Redwolf Station i r C U "

SÈ8&ET

hi b2 b6 ' b7A b7C b7E

JftS^I I As you know, we currently have three Redwolf terminals iri

case. For various operational reasons we need to havei""^ lassignecnlo this case in in an unreiaieo

justification at any level if that is needed.

• *f£kWe expect to go up onl I Additionally, we are drafting a newj_

This case continues to be a priority at HQ so I am happy provide

(U) Also, construction on our expansion in the RA continues and we expect to occupy the new space circa August or September. At the very least,-we will want to relocate the terminals on the 5th floor to other work areas, also on the 5th floor. No firm plans have been made but it is possible that tli£_L£j3resence in the RA will also increase at that time so we want to continue to be thinking about expanding thej [capabilities.

We appreciate your assistance.

SEDrtEJ

—t>fcCLASblH(JA I l6N EXEMPTION 1 SECRET

PlrRIV/bU hRUIVI. U - i TDI Glaj^ifieatian-GuidflAA-thrteU l/tf/. I üreign Counterintelligence Investigations - PCGLAOOIHIAIIUN bX^PT ION 1

SECRET

DERIVED I UblLASblHCATlON EXEMPTION 1 SECRET

sign (Counterintelligence Investigations

UNCLA33IREP-

UNCLA3SIPteD-

SEptfET 116

From: Sent: To:

Cc:

Subject:

ALL INFORMATION CONTAINED HEREIN 15 UNCLASSIFIED b 2

DATE 04-09-2009 BY 60322 UC/LP/STP/JCF B 6 b7C b7E

Thursday June 15. 2006 12 34~FKT

T r n r r

JOTD) (CONP" RE: RMS 102667 -| Jwindows workstation

SENSITIVE BUT UNCLASSIFIED NON-RECORD

Can anyone provide an update to this RMS ticket? Last entry was March 06. Thanks

[ = •

Last Entries: 3/30/06 8:39:00 A M [ We are still working to resolve th^

9/23/05 8:32:54 A M [ We are looking into the possibility of

8/29/05 1:13:26 PM ~ | I has Reassigned or Forwarded this request toQ

—Or ig ina l Message-From{J ] Sent: Friday, September 23, 2005 8:34 AM To: Cc:

Subject: RMS 102667 -| Iwindows workstation


RMS 102667

hold off and he would look into this issue

9 / 2 3 / 0 5 8 : 3 2 : 5 4 AMI ~1 We are looking into the possibility of| workstations to meet/test this requirement.

Just to update you... They have run into some - hopefully small issues, witlf

I will keep you posted.

SENSITIVE BUT UNCLASSIFIED


RW b2 b6 b7C b7E

SËpRÔ

DECLASSIFIED BY 60322 UC/LP/STP/JCF ON 04-09-2009

Subject: Updated: RE: Supplemental procedures

•b2 b6 b7C

Recurrence: (none) ^ i e

Meeting Status: Accepted Required Attendees:

Start: Wed 6/21/2006 1:30 PM End: Wed 6/21/2006 2:00 PM

I don't understand how we, the people that provide technical capability, satisfy an audit request that deals with the propriety of collected data. I see this as the responsibility of the substantive squad in the field and the substantive desk at HQ. Pis get together with me at 4 PM today to discuss how we satisfy this request.

Thanks.r I

From: DICLEMENTE, ANTHONY P. (OTD) (FBI) Sent: Tuesday, June 20. 2006 10:14 AM

• To: Cc: Subject: RE: Supplemental procedures

SECRET-RECORDl

1-1 will have UCj Contact I will have DITU initiate the audit ofl I I agree w/conducting a joint audit o(f~" you to coordinate. I will have DITU coordinate w/| the final submission to[

Anthony P. DiClemente Chief, Digital Evidence Section Operational Technology Division

[email protected]

—Original Message— From: I ] Sent: Monday, June 19, 2006 3:15 PM To: DICLEMENTE, ANTHONY P. (OTD) (FBI); Subject: FW: Supplemental procedures Importance: High

•SECRET RECORDl I

Two very important tasks listed below. The most critical is the July 1, to have started an audit, of the Red Wolf, W e share the use of

systems (see below for details). md probably should respond jointly on that one. Do you see a need

115

mailto:[email protected]

to coordinate the response on the other systems. I lAlso note the Sept deadline on)

Y o u r thoughts?

b2 b6 b7C b7E

Assistant section Chief Electronic Surveillance Technology Section Operational Terhnnlnnv Division

—Original Message-From: | Sent: Monday, lune 1Q. 7006 1(1:77 AM To: C c : . Subject: FW: Supplemental procedures Importance: High

SECRET RECORD[

[ Have the below 2 items been logged as "to do" so that we can track to completion?

(4) N o la access to

er than September 1; 2006, the FBI will provide a mechanism for all personnel with to receive notice of,Tand have the ability to review, E and

X

(5) N o later than July 1, 2006, the FBI will commence an audit of the Red Wolf, andl I databases to confirm:

(b)

Thè status of the audit will be reported to OIPR no later than September 15, 2006, which information OIPR shall forward to the Court no later than October 1, 2006.

—Original Message-From: | Sent: w^nnpcria» inn» 14 -;nnfi 7-4Ç bM To:

Cc: Subject: RE: Supplemental procedures

SENSITIVE BUT UNCLASSIFIED SËpRÔ

NON-RECORD b2 b6 b7C b7E

I | I am inserting your suggested changes (from your other e-maii) and that redline/strickout draft will be circulated to our folks in 01 PR &| Iwill then prepare a final version which will be sent to you folks - probably Thrusday afternoon - -

Re the issue raised helnw - we do not think OIPR needs tn he nrnvirtinn anuthinn additional -f

HZ2 • —Original Message— From: I Sent To:

Wednesday. June 14. 2006 8:14 AM

IUULI IUI.A1-Cc: | Subject: Supplemental procedures


Can we clarify something on the supplemental procedures. The recommendation to have done by September 1 the ability to have notice of and access supplemental procedures --1 think there have been discussions with OIPR that this will entaill t _ _ l

Is that fair to say -1 am basing this on conversations with£ and _ , , ,801 want to make sure we are all on the same page in this respect - that we can get this done by September 1 but only with the assistance of OIPR.

Secondly, when we discussed thef said that we were because the recommendation about

Tat the meeting. I thought we had I Mavbe I misunderstood -

But in either event, OIPR's efforts are crucial. Bothl |and| |have said that the September 1 deadline is workable provided there is a mechanism developed whereby the systems can get the supplemental procedures. So can we have some confirmation o nthis issue that OIPR, in the course of downloading the final FIRAs, will make this informatio navailable, in whatever manner you have already discussed withl 1

Thanks! I



SËpRÔ

SËpRÔ

OCMOlflVC DUT UHCLAOOirilID

OCNOIT1VC DUT UNOLAOOtFtiE»

SFMSITIVE DUT UHCLAOOinCD

S Ë p R Ô

DECLASSIFIED BY 60322 UC/LP/STPyJCF ON 04-09-2009

To: I " I Subject: FW: Response to Supplemental Procedures

• ^ . PlRa.se review the following answers in red to issues raissd in the supplemental procedures communication from I [The team will address your more recent e-mail re| ¡in a separate communication.

b6 b7C b7E QTD/ESTSmOTU.

—Original Message-From: Sent: .TlWiylfiV. Jllffî ?,?,, ?0()fi 5:15 P.M To: I I Ce: £ Subject: Response to Supplemental Procedures

-OCCRCT • RECORD I I

SECRET RECORD|

[ = •

Please review our response to your questions below. I've pieced together various parts of your original correspondence.

From I I

Gents, I attended a meeting with the front office this afternoon and it seems the essential RW questions to be answered

are these: I I I would there De aflditional costs to incorporate changes and how much? It was generally agreed the audit procedures mentioned below needs to be handled by field office/FBIHQ and nol br RW. Are these assumptions correct? Short response time on this (tomorrow). See

I fme if there are questions. Thanks.

-Original Appointment-From: | I On Behalf Of | | Sent: Wednesday. June 21. 2006 8:52 AM T o : I I 1

TFBIJ 1 : 1

Subject: Updated: RE: Supplemental procedures When: Wednesday, June 21, 2006 1:30 PM-2:00 PM (GMT-05:00) Eastern Time (US & Canada). Where:

I don't understand how we, the people that provide technical capability, satisfy an audit request that deals with the! I I E*ls get together with me at 4 PM today to discuss how we satisfy this request.

Thanks.

89

From: Sent: To: Cc: Subject:

t c r r r r r oCliHL I ' RECORPf

DICLEMENTE, ANTHONY P. (OTD) (FBI) Tuesday. June 20, 2006 10:14 AM

RE: Supplemental procedures

b2 b6 b7C b7E

I will have! linitiate the audit oil | ! agree w/conductino a joint audit ofj you to coordinate. I will havel [coordinate w/| bn the final submission to Lynn Pierce

Anthony P. DiClemente Chief, Digital Evidence Section Operational Technology Division (703) 985-1204 [email protected]

]- i will have UCl fcontact

—Original Message-From: I Sent: To: Subject: Importance:

-atiCRbX

JOTD) (FBI) Monday, June 19, 2006 3:15 PM DICLEMENTE, ANTHONY P. (OTD) (FBI); j FW: Supplemental procedures High

RECORD

Tony.f I Two very important tasks listed below. The most critical is the July 1, to have started an audit, of the

[ and Red Wolf, W e i

Jsystems (see below for details). J n d probably should respond jointly on that one. Do you see a need

to coordinate the response on the other systems. ] Also note the Sept deadline on

Y o u r thoughts?

Assistant Section Chief Electronic Surveillance Technology Section Operational Technology Division

-Original Message-From: | |

mk Sent: 'Monday, l i ^ l ü . ITOS l O ^ M To: Cc: Subject: FW: Supplemental procedures Importance: High

OCORCT RECORC] j

90

mailto:[email protected]

Michael,

tUl-

HI ave the below 2 items been logged as "to do" so that we can track to completion?

(4) N o later than September 1, 2006, the FBI will provide a mechanism for all personnel with access to kndl I to receive notice of, and have the ability to review, all supplemental minimization procedures that may apply to an authorized FISA collection. ^ ^

(5) N o later than July 1, 2006, the FBI will commence an audit of the Wolfvl l| kndl hat-abases to confirm:

(a)l

Red

and (iii)

b2 b5 b7E

anc

n>H

l

Icurrently exists on Red Wolf. As stated in response 1,

The status of the audit will be reported to OIPR no later than September 15, 2006, which information OIPR shall forward to the Court no later than October 1, 2006.

91

few L

From: Sent: To: Subject:

DATE: Q4-2Q-2QQ9 CLASSIFIED BY 60322 UC/LP/STP/JCF REASON: 1.4 (c)' DECLASSIFY OH: 04-20-2034

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOOT OTHERWISE

Tuesday. June 27. 2006 10:40 AM

Accomplishments for the last six months. b6 b7C


After review my records this is what I came up with

1) Or from[ 1) Ongoing support fori I Major Case[

l a n d jand preparing the data for court proceedings. ] Providing onsite training and L

2) Providing Red Wolf data recovery for[

3) Assisting I

4) Assisting |in resoiving£

n preparing Red Wolf Data for Trial

T/vith Red Wotf media an {

b2 b7E

5) Ongoing support with[]

6) Ongoing Support with£

and jfor compatibility with Red Wolf bl b2 b7E

in Tto be compatible with Red Wolf

7) Conversion oi b r active investigation i i£

8) General support of|

Let me know if you need more information.

Thanks b6 b7C

UNCLASSIFIED

88

DATE.: 06-22-2009 CLASSIFIED- BY' 60322 UC/LP/STP/JCF REASON: 1.4 (c) DECLASSIFY ON: 06-22-2034

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOOT OTHERWISE


Thursday I ine 99 90nfi 19-49 PM i(FBI)

b l b2 b6 b7C

t W: Response to Supplemental Procedures

sEgfjfcr RECORD

in rase vnn riiri nnt net Tif.Ti I's response last week, I am resending it re the emailing "you forwarded to me today: I I will explain thè OIG request (it is different) to you tomorrow. Thanks.

—OriginalMessacje-— From: . Sent: . "Thursday. June 22. 2006 6:32 PM To: I J(FBI) Subject:

SÈOPTÉT RECORDF

FW: Response to Supplemental. Procedures

• Responses in red below. We will work on answering your recent email re

---Original Message ; From: Sent: To: Cc: Subject:

Thursday, June 22, 2006 5:15 PM

RECORDC

Response to supplemental Procedures

I '

SEfe^ET RECORD 268-HQ-1409178 •

Please review our response to your questions below. .I've pieced together various parts of your original correspondence. :

From I I S É p R É T

DATE: 06-22-2009 AIIL INFORMATION CONTAINED CLASSIFIED BY 60322 UC/LP/STP/JCF HEREIN IS UNCLASSIFIED EXCEPT REASON: 1.4 (C) WHERE SHOWN OTHERWISE DECLASSIFY ON: 06-22-2034


RÉCORbf

(FBI) ihursdav. June za. 2UÜ6 2:14 PM

RE: Response to Supplemental Procedures b i b2 b6 b7C

We'll talk tomorrow.. This is getting more difficult as we speak. C Z I Assistant Section Chief Electronic Surveillance Technology Section Operational Technology Division

I 1 703-632-6300

—Original Message-From: I Sent: To: Cc: Subject:

Thursday, June 29, 2006 12:42 PM ELLIOTT. MICHAELT. (OTP) (FBI)

FW: Response to Supplemental Procedures

< S K RECORD

• in r-aw voi i HiH nnt net TIHTI I's resnnnse last week, I am resending it re the emailing you forwarded to me today:

I will explain the OIG request (it is different) to you tomorrow. Thanks.

—Original Message-From: I Sent: To: Subject:

1 Thursday, June 22, 2006 6:32 PM I fr"") FW: Response to Supplemental Procedures

SËCTgÉT

( S ) Responses in red below. We will work on answering your recent email re

•Original M e s s a g ^ p f t ^ F T

59

ALL INFORMATION CONTAINED b2 .HEREIN IS UNCLASSIFIED • b6 DATE 04-10-2009 BY 60322 UC/LP/STP/JCF • b7C

From: Sent: To:

Wednesday '.Inly 1fl ?nnfi R-4S AM

Cc:

Subject: ' DCS 5000/RedWolf

.23

SENSITIVE BUT UNCLASSIFIED RECORD

b2 b6 b7C b7E

As many of you know, there has been a lot of discussion aboutf

Several Field Offices, particularly

So

WHAT IS ???

is a procedure that runs in conjunction witff

Jcontains the list of £ 24

Jthat are eligible for

b2 b7E

Thfi contains the

T.hfj In in«; a»; nar i nf t hd I

A rennrf l isfinnl I

FOR DCS 5000 I REDWOLF SYSTEM ADMINISTRATORS - Please provide any special I I such as| NO LATER THAN MONDAY 24 JULY 2006

ËLSUR Technology Management Unit (ETMU) Electronic Surveillance Technology Section (ESTS) Operational Technology Division (OTD) ERF. I I

b6 b7C


25

From: Sent: To:

ALL INFORMATION CONTAINED •HEREIN 15 UNCLASSIFIED . DATE 04-10-2009 BY 6Ö322 UC/LP/.STP/JCF'

• • bZ b6 " blC

WerlnesHav .lnlv 90nfi 11 -OA AM

15

Ce:

Subject: RE: DCS 5000 /RedWolf

SENSITIVE BUT UNCLASSIFIED R E C O R q T ~

b2 ' b6 b7C ' b7E

The email below notified the field of the deployment of a procedure to

which they wanted exempted from the process that they should notify us by 24 Jul 06. To date we have received such requests from less than a dozen sites.

Please note - This procedure will be activated field wide beginning tomorrow. This is your last chance... If you have no special configuration requirements - an email so stating would be appreciated.

Thanx

ELSUR Technology Management Unit (ETMU) Electronic Surveillance Technology Section (ESTS) Operational Technology Division (OTD)

• —Original Message-From: I Sent: To:

Wednesday. July 19. 2006 8:45 AM

16

1 ALL .INFORMATION-CONTAINED HEREIN. IS UNCLASSIFIED • DATE .04-10-2009 BY" 60322.ÜC/LP/STP/JCF


Thursday. July 27. 2006 9:55 AM

FW: EC review for Data system legality issues b6 b7C


• ; I recall we discussed this back in early June, do you have any email records or other notes of our views?

As I recall, the process is t o | ~

NSLB's concern is that because 01 PR considers cail session data (they call "metadata") to be subject to the standard minimization procedures (SMP), anytime that data is copied and put into another "system" it must done in compliance with the SMP. For.example, because I ~ l for communications intercepted pursuant to FISA coverage is loaded intol

:b5 b6 b7C b7E

Unfortunately, if£ "lis not a separate "database" but it's more akin to a copy or report of thel

|is supject to Minimization, then before a r.nnv nr rennrt can be produced it must he nrnnerlv minimized- It may be more useful to deem the| t

_from RedWolf or RedWolf active storage)

-Original Message-From: Sent: To: Subject:

Thursday. July 27, 2006 8:13 AM I f I ' FW: EC review.for Data system legality issues


are you familiar with the pro j| UQYQU understand the proposed!

have guestions about[ lis functioning as

proposed for use bvl _ |in the J in essence, | ["SHa not f

1 h. l t -.^¡Hn trrm t h - t thio

neea io cnecK witnl" 3na tina out wnetneq pr | have aaaressea any or tnis yet.

Policy & Training Unit National Security Law Branch 1 I

Original Message From: I Sent: To:

Wednesday. July 26. 2006 12:26 PM

Subject: Y w : tL review ror uata system legality issues îy is

11


Thank vou for vour assistance. Here is some more information that I collected earlier regarding[_ andl I Please let me know what other type of. information is needed.

s Again, much appreciated.

—Original Message-From: L~~ Sent: Tuesday, June 13, 2006 2:50 PM To: Cc:

QfFBi) E Subject: FW: EC review for Data system legality issues


bZ be bic blZ

Hopefully one or both of you can help us out with our purchase request as it has been languishing "in the approval process" for a long time. My original immediate EC went out 3/14/20061 followed with a specific monetary request EC dated 4/20/2006 (attached helnw^ Please read the email'r.hain for background info. Apparently, |has legality concerns regarding (hopefully one of you guys) to pass on the following information to[

. . need someone Is Office so his concerns can be alleviated:

As the name implies, it is simply a[

/4) The system will cost betweenf

clarification is needed. Thank you.

to build (per ERF). The system can/will.be used for other! ]once the major case is complete. Please let me know if further information or -

—Original Message— • From: I ~1 Sent: .TUSS^Y, JUTO lì, 3Q0§ II,}* PM To: I I Subject: FW: EC review for Data system legality issues

12


b6 b7C b7E

See below. It is either) ] orl information about the system, in order to get the ball rolling

] I will follow up; In the interim, maybe I can get some more detailed

Original Message From: ~ Sent: To: Cc: Subject:

ririav lune n? ?iffîfi 10-41 AM

E FW: EC review for Data system legality issues


Please find attached the document. Your review is much appreciated. I definitely recommend that you call the field. He is the one that knows the most about the particulars of the system. His number is listed below1

| |emailed me yesterday with the following:

in

Please advise me on who in this email chain I should talk to regarding the Ipurchase? It is not a| I What I mean by"

linanKS.

-—-Original Messapa From: | _ Sent: To: Subject:

Friday May 7fi. 7006 AM ^

EC review for Data system legality issues


I II know that you are in the Litigation unit now-but it is my understanding that you are the one with the breath of •knowledge when it comes.to|~ 1 | picked this back for OGC to look at it for data system legality issues.

The SSA i s [ and the individual fromthe

knows the particulars with regard to this-system.

Please let me know if you will be able to review this, it would be greatly appreciated. If you are not able to do this, please let me know who else may be able to.

Thank you.

13

-Original Message-age From: L Sent: Thursday, May 25, 2006 9:50 AM T o : I Subject:


04202006 request . for money for...

b2 •b6 b7C

Per an email frnml Hast week, | Returned this request because he wanted legal to review due toj | legality issues. | [said you needed the electronic version of the ec in order to forward it to the right person in Legal. Here is thé request. Let me know what else you want. I |s desperately waiting for this as they are taking up space in ERF's offices and starting to get complaints, etc. If you can let me know who you are forwarding it to I will follow up with . them too. Thanks, |

UNCLASSIFIED

UNCLASSIFIED „

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED


14

FEDERAL BUREAU OF INVESTIGATION FOIPA

DELETED PAGE INFORMATION SHEET

Serial Description - COVER SHEET

Total Deleted Page(s) ~ 11 Page 228 ~ Duplicate Page 229 ~ Duplicate Page 230 ~ Duplicate Page 231 ~ Duplicate Page 232 ~ Duplicate Page 337 ~ Duplicate Page 338 ~ Duplicate Page 353 ~ Duplicate Page 354 ~ Duplicate Page 402 ~ Duplicate Page 403 ~ Duplicate

xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) Xw X No Duplication Tee X jboojoSoxxSxxxxxxxxxxxxxx

(OTP) (FBI)

ALL INFORMATION CONTAINED HEREIN 15 UNCLASSIFIED DATE 01-06-2009 BY 60322 UC/LP/STP/JCF


](OTD) (FBI) Friday, February 03, 2006 8:22 AM

](OGC) (FBIL 01

RE: OGC Questions I O T D ) (FBI);) (OTD) (FBI)


b2 b6 blC

—Original Message From: | Sent: To:

](OGC) (FBI) Thursday. February 02, 2006 12:16 PM

I (OTD) (FBI ) ;C

Cc: Subject:

(FPU

FW: J(OTD) (FBI);[


](OTD) (FBI);[ ](OTD) (FBI);[ I l T D )

^OTD) (FBI)

All— would you help me answer the below.questions, Please!

1) Re: access decisions and who controls the operation of the system-e.g., who tells the field or the system administrator how they should determine who gets access to the system-in other words, who is the ultimate gate-keeper of the system and its data>

If the question is who at I Itells the field how they should determine access -1 suppose that would be the I laccording to the system security plan (SSP) Guidelines and default privileges for the various roles on the system are described in the SSP. Special requirements(additional privileges) are determined/justified at the site level by the and

1 ^ b2

2) Re: deletion of data-any record made of deletions. !b6 - this would also indicate b7c

that a session has been deleted... We do not however currentlyl Isuch as b 7 E

I I... Typically linguists do npt deletel I- they reside on the system indefinitely.

3) Re: auditing of pertinence markings and changes made to pertinence markings? What kind of a report would should show that pertinence marking changes have been made to a particular document or session?

Thanks in advance--] | —Original Message

From: ' | tOGC) (FBI) Sent: Thursday-. February 02. 2506 12:00 PM To: (OGC) (FBI)

426

Subject: RE:


Does each database have a program manager here at headquarters? Is that the person responsible for the operation of the system? Do they set any parameters on what access should be granted by the system administrator at the field office level? To the extent that below and in the course of your descriptions, you've made generalizations about who is granted access in a particular system, where does the information come from?'

At the field office level, will there be one system administrator for all the databases, or does each database has its own system administrator? Do you know if they have to have certain qualifications, or are at a certain GS level?

I am just trying to get a feel for what reponsibilities for the database come from headquarters and what responsibilities are in the field. I am going to be sending an email to the field asking some of these questions of them, as to the minimization requirements, their use of markings,-deletions, etc., so I am just trying to figure out what information the field should have versus what information headquarters has. For instance, c

t? Or inf iven thatl 1 where would I find out if data is ever n other words in trvino to find out if the

Thanks.) | . . „ —Original Message—

From: I ~VoGQ (FBI) Sent: Wednesday, February 01, 2006 12:52 PM To: I |(OGC) (FBI) b2 Subject: RE: b 6

• b7C UNCLASSIFIED b7E NON-RECORD

See response in red and black below- .

. —Original Message--— From: | [OGC) (FBI) Sent; Wednesday, February 01, 2006 11:54 AM To: I 1(060 fFBn Subject- RE: -


• • Okay. Thanks.

I lalso had a question as to why we would delete from£ not being in place, since it might otherwise leave a misimpression, when we say there are| | that they are being used. As it was written --I thought it said more than necessary. As a pure factual matter h 6

the! I £7C | lis not clear! If you say its not used, then it b 7 E

would be in our interest to say why not AND why we think operating it without auditing is okay. But simply saying thatl |

Also, | Iwants to know, the following about each database - exactly what criteria are used to determine who gets access and who applies those criteria; also whether there is a provision for users to have been trained in the| land whether there is any form or something to that effect that an authorized user has to sign acknowledging that they've read or know the| |

Neither I nor OTD can answer the| [training/certification question-lf there is a policy requiring such, it

427

b7E AS to "what criteria are used to determine who gets access and who applies those criteria:"

|The systems administrator for the filed o f f i c e Q ] system

Also, as to Red Wolf, do we have any idea of the number of authorized users or is that something the field offices would have to provide. The field offices vvill have to give office specific numbers

.Lastly, are Red Woof,!

"I RedWolf systems a ~ generally I

desktop)- are they stand alone computers in the field offices, or accessed from the same computer? Do you happen to know?

428

Thanks, as always.

—Original Message— From: I I (OGC) (FBI) Sent: Wednesday. February 01. 2006 11:49 AM T o : | KOGC) (FBI) Subject: Kfc:

UNCLASSIFIED b 2 NON-RECORD h 6

•b7C

i m z i ]may be used to| [dial-up (i.e., modem) Internet account activity—this would

include any activity engaged in using this Internet account, to include email, chat, websurfing, etc.

—Original Message— . From: I l(OGO (FBI) Sent: Wednesday. February 01. 2006 11:32 AM To: I l(OGC) (FBI) Subject: RE:


. | lyou answered yes to this question below in a prior email but didn't rsallv explain I Iwants me to define modem intercept in the! (description. How would you put| I internet connection" into a form that explains exactly what form this is - what does the data look like. It

' is just IP addresses, websites, or what? I guess I still don't understand what it is.

I Iwent over all of these memos, and she had me make your changes on the Red Wolf description and some of your changes on thd Idescription. and l am making your changes on the| | description.

-Original Message— From: I l(OGQ fFBIl . b2 Sent: Tuesday. January 24.2006 5:59 PM b6 To: I IfOGC) (FBI) b 7 c Subject: RE:


So it would, include the| I and if so, in what form, copies of the I f? This is different from your emails, correct? (I told you I am technologically challenged)

—-Original Message— From: I ~" l (OGCHFBI1 '. Sent: Tuesday, January 24, 2006 3:20 PM To: I I(OGC) (FBI) Subject: T E


—Original Message— . 429


](OGC) (FBI) Tuesday, January 24, 2006 2:25 PM I I f O G Q (FBI)


b6 b7C

What is a computer modem intercept?

Thx

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED .

UNCLASSIFIED

UNCLASSIFIED

UNCLASSIFIED

430

(OTP) (FBI)

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED DATE 01-06-2009 BY 60322 UC/LP/STP/JCF


] (FBI) Friday. February 03 2006 1:24 PM

l(OTD) (F.Bl); IFBIH:

1 (OTP) (FBI) JCON)

FW: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA information


. h 6 b7C

age I KFBI)

—Original Message-From: Sent: TridavT February 03. 2006 12:33 PM To: I 1FBI1:1 l(FBI) C c ! I tFBI) Subject: RE: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA information


1) Does! Icontrol access tol I? If yes, Who and how is it decided who gets access??

2 Doesl Icontrol access to REDWOLF? If yes, Who and how is it decided who gets access?? b2 to 6

From: ~ I ~ KOGO (FBI) . Sent: Friday, February 03,2006 10:18 AM b 7 E

To: FBI ALL CDCs: FBI SAC's • Cc: I irnfin (FBI);| 1 (OGC) (FBI); I HflGC) (FBI);| 1

(OGC) (FBI) Subject: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA information


b2 to7E

Therefore, with respect to each of the five listed databases -1 |Red Wolf, | please provide:

1) the identity of the system administrator

2) the identity of the parties granting access to the database - the system administrator, the case agent, or some other person

424

*3) the criteria for granting access to the database

4) whether minimization training is a prerequisite to becoming an authorized user

5) whether there is some documentation as to the minimization training of the users

6) whether the marking capacity of the database is being used (this is a subjective analysis but I would think it would be possible to generalize as to whether in fact users of the database are making use of the capacity to mark data on a consistent basis, sometimes, rarely, never, etc.) - of particular.concern is the privilege marking, so if the privilege marking is being used, we'd like to know

7) whether the deletion capacity of the database is being used (again, this is a subjective analysis but probably subject to generalizations that the deletion capacity is being used consistently, sometimes, rarely, never, etc.) - again, of particular concern is the privilege marking so if privileged communications are being deleted, we'd like to know

8) any other information that you think would be helpful to us in determining whether in fact authorized users of the databases are aware of the obligation to minimize and whether in fact minimization is taking place with respect to these databases.

To the extent that your previous response answers these questions, please just reference that response. I think that the earlier EC focused access questions more on who had access rather than the criteria, so I don't think this request is redundant. But, again, to the extent you may. have already answered the access questions set forth above, just reference your previous EC. We are not trying to be duplicative.

• Please provide responses to I |by the COB Friday, February 10, 2006. Questions can be directed to me- | |As always, your cooperation is greatly appreciated.

Thanks.) |


SENSITIVE BUT UNCLASSIFIED .


425

VOG is ani fallows for£

As far as speaking to you in-service you need to check with my program^

Thanks

b2 b6 •b7C b7E

—Original Message-From: Sent:

](RMD) (FBI)

Tose Subject:

Friday, February 03, 2006 11:19 AM • (OTD)(FBI) RE: DUPLICATING EQUIPMENT


I don't want a presentation that goes over their heads. So can we do this? Talk to them about duplicating cassettes I know they all do that. And ask them if they have needed to convert the others, MOs to CD/DVDs

WhatisVOC? —Original Message— .

From: I loTD) (FBI) Sent: PriHav Fphmarv fil 2006 10:43 AM To: 1 |(RMD) (FBI) Subject: RE: DUPLICATING EQUIPMENT


Thefollowing offices have I I Peployment is pending to system to replace!

"¡MO to CD/DVD converters.

b2 b6 b7C b7E IV \sutuv IS Wffrci LC7I I I

J In time as budget permits all office will be getting this

This is how an works.

421

to CD or DVD. The CD or DVD are then labeled and ejected from the disk publisher.

which is compatible with Redwolf.

I am also the team leader thél Ithat provides FISA data recovery services for| |and Redwolf.

. b7C Thanks • b7E

—Original Message— From: . I l(RMD1 (FBI) Sent: Friday. February 03. 2006 10:16 AM To: | I (OTP) (FBI) Subject: RE: DUPLICATING EQUIPMENT


. Definitely the cassetts. What offices have you provided converters to?

—Original Message— From: I IcoTD) (FBI) • Sent: Friday, February 03, 2006 10:07 AM To: I KRMD) (FBI) Subject: RE: DUPLICATING EQUIPMENT


What type of duplicating equipment? The only true duplicators that my group provides are cassette duplicators.

In the line of converters we provide analog audio to CD/DVD. We convert FISA MO's from I I b2 JRed Wolf to CD/DVD including b6

b7C Thanks b7E

—Original Message— From: . I I (RMD) (FBI) Sent: Thursday. February 02, 2006 2:58 PM To: I |(OTD) (FBI) Subject: DUPUCATING EQUIPMENT


U Z 3

Do you now handle all the duplicating equipment?

422

(OTP) (FBI)


From: Sent: To:

[ J(OTD) (FBI) :b6 b7C

Friday, February 17, 2006 3:39 PM

Cc: b6 b7C

389

Subject:

KFB1VI

~1(FBI):I

IfFBi),,

r coN) i M N R

DCS 5000 C&A

I ( F B i ) I ](FBI);[;

.(FBI) liFBi)

TO

L J F B I U TFRIVI

Ì FB l j ; |


The DCS 5000 / RedWolf system has received Approval To Operate (ATO) from SecD based on a type certification and accreditation process. I will be providing copies of all relevant C&A documentation, including the System Security Plan, the User's Guide and Privileged User's Guide, and the Implementation/Migration Plan which will lay out the processes and timetable for deploying the approved security configuration and policies to the field systems.

In preparation for this deployment, request that Field Office TA/TS/TTA personnel review the attached spreadsheet containing key support personnel. It lists

System Administrators/Alternates - those who are primarily responsible for day to day administration of the system, adding new users, etc.

Software POCs - those individuals (government) to whom we should send any software updates for the system.

Local System Security Managers - Those personnel (government) who will be responsible for the security of the system, to include validating user account requests, and reviewing local system audit logs. - more on that in a later email — we are working on some tools to simplify this process.

Please verify that each position has someone assigned to it. The system administrator should not be a security manager- since part of the security manager's responsibilities include insuring that the system administrator is complying with appropriate guidelines.

Also each facility should indicate any additional personnel requiring Privileged User access to the system - generally this would be anyone with Operating System access/// not application access. Privileged User accounts will be verified/validated by the accounts will be validated and managed locally.

here at ITD. All standard user

h 2 b7E

Please review and provide your input as soon as possible - There is a lot of work that has to be done, b2 and we really do need to get it underway. ;b6

Thanx :b7C b7E

390


" S H j B Ç f DATE: 02-12-2009 CLASSIFIED BY 60322 UC/LP/STP/JCF REASON: 1.4.(c) DECLASSIFY ON: 02-12-2034

ALL INFORMATION CONTAINED . HEREIN IS UNCLASSIFIED EXCEPT TJHERE SHOWN OTHERWISE

lOTD) (FBI)

kOTD) (CON) Mnnrlav March 77 2mf i 12:55 PM

l O T D ) (FBI) KOTO) (FBI)

FW: Further response to Court's Order of December 9, 2005

SfegKÉT TfECORP[

is this something you can handle for I Thanks.

DUE WEDNESDAY 3/29. Please discuss with

b2 b6 b7C b7E

1ET RECORD [

Monday. March 27. 2006 12:51 PM |_ [OTP) (CON)

}OTD)(CON) On Behalf Of[] —Original Message-

From: Sent: To: , . . . Subject: FW: Further response to Court's Order of December 9, 2005

](OTD) (FBI)

As discussed.

-----Original Message-From: | Sent: To: Cc:

H i O T D ) (FBI) 572006

l l T D ) (FBI)£_ ]OTD) (FBI)t

1nrm CFsnf

Subject:

SECRET

' (on?) (mi) RE: Further response to Court's Order of December 9, 2005

]0TD) (FBI);[ "Irmi fFRii

]oGC) (FBI)C

RECORD^

b2 b6 b7C b7E

.The attached e-mail has several questions in follow-up to the FISA Court's Order of December 9, 2005. A copy of the response to that order is being routed thru BuMail to each of you so you may remind yourselves of you earlier responses.

The Questions and responsible parties for answers are:

ITICTU (1 ) how does the infn get into the databases - e.g.. disc or automatic electronic transfer from the carrier/ISP or the listening post toi Iwhich inputs it into| fete ??? [this is the least important but they were having trouble visualizing how this work]

257

This is where the last vugraph may be inserted with descriptor...Electronic transfer from access system

TICTU (2) some screen shots for each system - so they can see what we mean by marking something non-pertinent, privileged, etc, as well as other features of each system - also help show what subsequent users see when they pull up a piece of info which another analyst has already reviewed

You can use the diced screen shoots from the third vugraph or using the training material....

TICTU (3) perhaps an example of what an audit trail print out would look like for each system

The audit write up has the screen shot for the history....should add examples of login, etc.

TICTU (4) for Red Wolf - they did not understand re the "list'1 "party" re "session" - what does it mean to be included In these "lists", sessions, etc

(5) they want more specifics re how the National Archive Retention works vis-a-vis the 11 yrs FBI retention

I I TICTU (6) same issue re "back up" retention for as long as "operationally necessary" N/A (7) specifics re how destruction is accomplished. . N/A (8) some other minor but specific .issues, e.g:, rq; [which we could not answer.

nd I by Wednesday, March 29, 2006. Copy toQ ]so she may Please provide responses back tc ( S ) assist in editing. It is our desire to do a briefing to the court on these matters. So, question 2 may be more

appropriate to have in hard copy. My thought would be to do a demo here at ERF, but we'll save that play for later.

b2 b7E

Questions call me or| | bl b2 b6 b7C b7E

-—Original Mffssanp From

OngpaLC ](°TD) (FBI)

Sent: Wednesday,-March 11, 2006 10:42 AM To: JOTD) (FBI)I

•) (FBI )C Cc: TO Subject: FW: Further response to Courts Order of December 9, 2005

"SCSgEf RECORD

HOTD) (FBI) J(OGC) (FBI)

Can you coordinate OTD responses (where applicable) to the below questions with

—Original Message— From: | |(OGC) (OGA) Sent: Wednesday. March 22. 2006 8:38 AM ' T o : I KOGCHFBI);!

(OTD) (FBI):! KCyD) (FBI);[ Ce: I TO(5Ä«KSAH FOGCHOGA)

b2 b6 b7C b7E

I jòùt) (òm JOGC) (OGA)J^

(OGC) (FBI);|

•TÖGC).(OGA).

](OGC) (FBI); (OGO (FBn

]0GC) (OGA);[

Subject: RE: Further response to Court's Order of December 9, 2005

SECRET RECORD

258

(S)

Jand I met with the Court's advisors on 3/17 re their reaction to the partial response re the databases -they were generally impressed but found it a little "heavy" to understand - based on their comments a futher SHORT factual declaration might be advisable - here are the issues that might be in such a supplemental declaration: (1) how does the info get into the databases - e n . disc or automatic electronic transfer from the carrier/ISP or the listening post to| [which inputs it into! |?etc ??? [this is the least important but they were having trouble visualizing how this work] (2) some screen shots for each system - so they can see what we mean by marking something non-pertinent, privileged, etc, as well as other features of each system - also help show what subsequent users see when they pull up a piece of info which another analyst has already reviewed' • (3) perhaps an example of what an audit trail print out would look like for each system (4) for Red Wolf - they did not understand re the "list" "party" re "session" - what does it mean to be included in these "lists", sessions, etc

bl b2 b6 b7C b7E

(5) they want more specifics re how the National Archive Retention works£ (6) same issue re "back up" retention for as long as "operationally necessary (7) specifics re how destruction is accomplished^ 1 (8) some other minor but specific .issues; e.g., r^ [which we could not answer.

Can we get together to discuss how-to respond - we like the idea of the screen shots - but do not want to get into another huge declaration. Please contact! lor myself re getting together re all this. In the meantime, I am working on a draft re the response re the other 2 issues in the Order which we hope to have to you perhaps as early as next week.

Thanks[~ |

—Original Message-From: I Senü ' Wednesday. March U8. ¿QUI T o : | _

Cc:

Subject:

SECRET" " R E C O R D [[

.OmiQGAif fFRTll

(FBI) PM

l(OGC) (FBI);[

RE: Files from

l ü t ) (UüA);[ If OGC) (OGA)

rom| ]

"lfCvD> (FBI) ]]0GC) (FBI);[ ]0TD).

30GC) (OGA)£ J(OGC) (OGA);|

There is only going to be one document that is signed. Everyone is going to be atl bt some point in the day. | foil be there around 10, | |is presumably there all day,I l i s there around 2.

—Original Message-From: Sent: To:

Cc:

Subject:

1(0' ¡"08,

(OGC) (OGA) Wednesday, March 08, 2006 5:26 PM

~ ï n p n (FBI);!"" _ _ _ Z _ _ - _ M D ) (FÓTJ3

" 5 S 6 g £ f RECORD" OIPR0001

'ID) (FBI)^ _ I (OGC) (OGÄTL

l-w: hies rrom[_ (OGC) (OGA)

J (OGC) (FBI) J EvD) (FBI) __J(OGC) (OGA)L

](OGC) (FBI);

" • ( O G C ) (OGA);

b2 b6 b7C b7E

Here is what should be final - please contactl Ire any changes and the logistics of getting these signed J fnust confirm you have the final - i.e., you all need the same version to make sure the pagination of the signature page etc is correct - so please get any further edits in ASAP and then| ~ will confirm you have the one and true Arc of the Covenant and then you need everyone to sign and get it back to us in time to file BEFORE the close of business - lets say last edits by 10 AM or earlier. Many thanks | |

—Original Message— ' From: I I (OGC) (OGA) Sent: Wednesday. March 08. 2006 5:21 PM To: | HGC) (OGA)

--—Original Messape^ From: | Sent: To:

Cc:

]oGC) (FBI) Monday. August 07, 2006 10:33 AM

lOGO rOGAii~ (OGC) (FBI);L

JOGO fOGAi (QGCÌ (FBI)

HOGC) (FBI)£

S I

lfOSH fOGAV.r 1-DEifFRnl IrnnnTFRÏÏT

S P C l û 2 Q i O G A ) [

ì (OGC) (OGA)f

](OGC) (FBI);[

IfOGC) (QCA);[

b6 b7C

loGC) J(OGC) (FBI ) ; [_ J(OGC) (FBI)

Subject:

3ECRCT— RECORD 99999-3333

I. (OGC) (FBI) RE: Minimization and database issues which need attention ASAP

tffSKH33BI

1 fifiü (QGA);

JO< U M "koGC) (FB °;GC)

Please ask | |to raise these issues with | [during their next meeting.

I will ask| "|about some of your issues, but I do not see a need for another survey at this time.

Did you discuss these issues with th^ |CDC?

h 2 •06 b7C b7E

-—Original Message From: Sent: To:

JOGC) (OGA) Monday, August 07, 2006 9:12 AM

' ' (OGC) (FBI)!" ](OGC) (FBI)£ ](OGC)(FBI)J_

Cc: r (OGC) (FBI) • (OGC) (OGAii 1 (OGO fOGAt:[" KOGCHOGA)! I

I l(OGC) (OGA)I ICOGC1 (OGA1:l l(OGC) (OGA); | KOGC) (OGA) Subject: Minimization and database issues which need attention ASAP

GCGRCT RECORD 99999-3333

1 last week f land I were out in| |for the minimization and I 1 reviews (along with from OIPR) and several minimiztion issues were identified which we

think need attention ASAP - in addition! lalso asked me to ask about another database which he just learned about and which was not included in our database filing. b 2

b6 The! Ifield office advised us that last year an inspection team of some sort had critiqued them for not getting their b 7 c | Iwithin the requried 30 day period - because this was due to the case agents being so busy they could not review th j jand mark them up in time for ELSUR to process them, in October 2005 the field office instituted a policy of having the language specialists send one copy of evervl to the case agentl and

^ to the bLSUK people who then automatically indexed intoj |all to/from names from every wire, wireless or audic|~ I- this obviously bv-passes the case aoent who under the SMP is supposed to make a determination that.thj I- a year ago we learned during thd [minimization review that the FBI was| |

199

fend we mentioned that in the database filing -I klso confirmed this

M) where did this 30 day rule re indexing into! Icome from - we had neverheard of it before ??? (2) we believe we need to quickly survey all the field offices to determine:

(a) how they have responded to this 30 Hay rule - to make sure their practice conforms to the SMP; and (b) if any are actually indexing into! tall to/from info from wire, wireless or audio coverages even when

the case agent has not made the requried determination re Fl. b2 .b6

Several weeks ago when I was in| [with I Idoing training, one of the monitors and the local computer guru b l c described a feature re Red Wolf which 1 had not heard of - inl II again had described to me this same feature - b l E which appears to be a I I associated with Red Wolf which I believe we have not described to the Court -basicially they described how RW collects the data for the monitors to use -| |

Also,I ladvised that he had recently been told of another database calledl "lwhich we did not describe in our filings with the Court - apparently there also may be other databases using the term) (something) "

Can we find out more about this/these databases ???

Please advise how we can handle these matters quickly. Thanks[_

^JERf tygB-EBOM: DECLAS _sseK£T

"DERIVED, F R O M:jyi DECLASSI S E C R F F

IDERTVEB-EROM: Midttet€"Sources DECLASSIFICA?10T^SX£MPTION 1 SECRgp-^

200

DECLASSIFIED BY 60322 UC/LP/STP/JCF OH 02-12-2009

(OTP) (FBI)


OCCRCT RECORD^

](OTD) (FBI) Tuesday, August 08, 2006 3:44 PM

IpGC) (FBI)jr iL DTD) (FBI);|

"JOTD) (FBI) J O T D ) (CON)

RE: Minimization and database issues which need attention ASAP •b2 b6 b7C b7E

The[ 1 cited below could be referring to the f which contains [_

I land any transcripts.

So for example, you will have a directory

directory on the RW land ultimately. the|

s the word perfect document containing the£ Where[

Alll ~|are saved to a similar directory structure on the fileserver and while the space is not unlimited, • -it is large and we have not had cause to see any overwritten.

The other possibility is that the| number basis and also contains all|_

refers to which is setup also on a case file ... which have been pushed from the RW.

Hope this helps ... Let me know if you need additional info.

b2 b6 b7C b7E

—Original Message-From: | Sent: To: Cc: Subject:

] (OGC) (FBI) 2JQ0€ Tuesday. August 08. 2006 9:59 AM

VOTPHFBI);! IpTD) (FBI)C

tOTD) (FBI) J(OTD) (CON)

FW: Minimization and database issues which need attention ASAP 193

Importance: High

-PCCRCT. RECORDL

Gentlemen:

Please advise re: the referenced below.

Also does RW interface with the other system/program referenced below? Or are all call detail records pertaining to a RW collection forwarded toi Ifor upload into! I Those records would also stay in the RW system Moral nr arachnet?) correct 1

b2-b6 b7C b7E —Original Message- -

From: I IfOGG (FBI) Sent: Monday, August 07, 2006 1:37 PM To: | |(OGC) (FBI); I tOGC)(FBI); Subject: FW: Minimization and database Issues which need attention ASAP

-GCORCT

(OGC) (FBI)

RECORD[

(1) Froml ]emai l below, are you familiar with what[ |is describing in REDWOLF as a| |

If so, how is access to the BUT - in

lhandled? Tthey indicated that the RW system also automatically |

( € = Jso,| pdvi

also asked about the following: Also,I bdvised that he had recently been told of another database called! " lwhich we did •

not describe in our filings with the Court - apparently there also may be other databases using the term | 1 (something) "

I searched on our web and there appears to be a program with you have any other info on this?

for call detail records. Do b2 b6 b7C b7E

Original Message ' • From: ÏOGQ (FBI) Sent: . Monday, August 07, 2006 10:33 AM ' • To: I —IrOGn fOGAIiL^ I (OGC) CFBP:I IfOGO (FBIH I

(OGC) (FBI):I IfOCCWFBIÏ C c : I I (OGC) (OGAV.I ~ Ir OGC) fOGADI ~IOGCHOGA)i I

I rOGH (OGAM rOGCUOGAV.I IfOGC) (OGAÏ lOGG (OGMT I M I(OGC)7FBI)J TOSO (FBÌ);| I (OGC)(FBI); I |(QGQ(FBI);| |(OGC) (OGA);| [OGC)

194

(OTP) (FBI)

DATE: 02-02-2009 ALL INFORMATION CONTAINED CLASSIFIED.BY 60322 UC/LP/STP/JCF HEREIN IS UNCLASSIFIED EXCEPT PEASON: 1.4 (c) WHERE SHOWN OTHERWISE DECLASSIFY ON: 02-02-2034

From: Sent: To: Cc:

Subject:

SECRET RECORE

Harry,

> B I ) T.iocHow n r > n h p r m onns 9:15 PM

1 fFBIvl ÌFBhJ IÌFRIVI IFRHI I

1/tTRII /

.(FBI); — , i F B n r H (OTD) iFBI):l 1 ,L FÔT)HFBI):I 1 (OTD) (FBI);

(OTD) fFBIÌ:! l(FBI) RE: Forward deployed

bl b2 b6 b7C b7E

Let me know what you think.

1

—Original Message— From: | ](FBI)

'p&^J

b 2 b 6 b7C

97

(OTD) (FBI)

DATE: 04-21-2009 CLASSIFIED BY 60322 UC/LP/STP/JCF REASON: 1.4 (c) DECLASSIFY OH: 04-21-2034

ALL- INFORMATION CONTAINED HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOWN OTHERWISE

From: Sent: To:

Subject:

(OGC) (FBI) Thursday. November 0? ?mf i 9-40 PM

(OGC) (FBI)j_ J (OTD) (FBI)

](OTD) (FBI);

FW: Red Wolf ELSUR System

SECRET RECORD 202a

This AUSA is also prosecuting the| lease and the judge in that case has indicated that may have to call b6 someone testify as to how RW collections work. The request is to identify who that person should be. b7c

FYI: Co-counsel on th^ "|case apparently already has a flow-chart on how RW collections work-not sure who provided it-perhaps a local person...

There are other CIPA proceedings in this prosecution so the AUSA could handle this in CIPA if necessary to shows how the RW system collection conducts intercepts, stores, copies, how data is written to the MO, how data is reproduced on to removable media, etc has this been done before, does it have to been within a CIPA proceeding?

is the NSLB atty assigned to the professor case.-l left her a voice mail message.

—Original Message-From: I Sent: To: Subject: ' Red Wolf ELSUR System

SECRET RECORD 202a

](FBI) Thursday. November 02, 2006 2:05 PM

I l(OGC) (FBI) Sy

indicated that you might be able to assist the FBI regarding the listed information.

The prosecution, Assistant United States Attorney (AUSA)|~ l h a s requested that we identify an expert that could testify if needed as an expert witness regarding the Red Wolf System. AUSA| |advised that he might be able to stiputate the information but would like to be ready if needed.

When you get a chance can you please call me at >r S A [

^ERtVSPLEROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreign Counterlntelligejice^rtvéstîqations DECLASSIF|g?me»kEXEMPTION 1 SECRET

DERIVED FROM: G-3 FBI Classifica* DECLASSIFICATION EXEMEHeiTT SECRET

nterlntelliqence Investigations

J S l S R i C ^

65

FEDERAL BUREAU OF INVESTIGATION FOI PA


Serial Description ~ COVER SHEET

Total Deleted Page(s) - 1 9 Page 16 - Duplicate 1056287 Div Docs Sec 29 Page 3 7 - Duplicate 1056287 Div Does Page 38 - Duplicate Page 43 - Duplicate 1083022 OTD/SPTU CR (CON) Page 44 - Duplicate 1083022 OTD/SPTU CR (CON) Page 130- b2, b6, b7C, b7E Page 131 - b2, b7E Page 132- b2, b7E Page 133- b2, b7E Page 134- b2, b7E Page 135- b2, b7E Page 136- b2, b7E Page 143- b2, b7E Page 144- b2, b7E Page 145- b2, b7E Page 146 - b2, b7E Page 147 - b2, b7E Page 233 - Duplicate 1083023 OTD/SPTU CJA3 Page 234 - Duplicate 1083023 OTD/SPTU CJA3

XXXXXXXXXXXXXXXXXXXXXXXX X Deleted Page(s) X

(OTP) (FBI)


l(FBI) Thursday, April 22. 2004 4:51 PM

_ _ . . _ " _ , ™ Kb: benectuie Mtg \| |DCS-3000/5000)


Thanks. MJ

b2 b6 b7C

Original Message— F r o m j I (FBI) Sent: Thursday, April 22, 2004 1:14 PM . T o j . _ _ \ ( F B l ) i KFBIll l (FBI )L

L O R O L(FBI)| , (CON); f r e n i h m U I (CON) Subject; Schedule Mtg vj KDCS-3000/5000) !


All: You are cordially invited to attend a meeting not yet determined.

Where: ERF When: May 3 - 7 ? Time: ? Subject: Develop capability to correlate CCC/CDC data for DCS-3000/5000

Last Wednesday, I spoke with I I from I land discussed the need to develop a sound, reliable solution to correlate the CDC/CCC data for the RedWolf and the DCS-3000.1 Jwill not be available next week, but the following week appears to be open. What day and time is best for each of you during the week of May 3-7? Please send me your requests and make sure that you include more than one choice. I will coordinate what works best for the majority. Thanks so much.

PS | pnformed me that] | have made the decision to begin developing "A Time Based Correlation" ror now. I don't have any details about how this algorithm is actually calculated. We can definitely get more specifics at our meeting. Is this the direction we wish to go, or are there other ideas? This is what we need to discuss. Please ponder on this. Thanks.

Later, -c -

UNCLASSIFIED 864

] (OTP) (FBI) b2 b6 •b7C,

From: Sent: To: I ICTD) fFBHJ

<?TfpTTFBin U S l(ITD) (CON)

1(ITD)(FBI):I l(ITD) KITD) (CON);| I

Subject: Tasking


We need to issue a tasking to to

Institute a software patch that will provide the RedWolf System with the capability to monitor user actions within the application. Events to be monitored should include: Login , logout, Session open, session delete, change review status, forward session, transcript, as well as all other tasks generally associated with RedWolf user utilization of the system.

The resulting Audit Trail Logs should be accessible only by system administrator level personnel


758

(OTP) (FBI)

From: Sent: To:

Subject:

|(ITD) (CON) Thursday, June 10, 2004 9:23 AM

I (ITD) (FBi);rZ _ I I | T D ) ( F B 0 L

I [ITDÌ (CON! RE| [Tasking

lUIQliEBll ITD) (CON)[_

l ( ITD)


Task Order B-319 W for a not to exceed | |was sent tc

Original Message-— From:| (ITD) (FBI) Sent: Wednesday, June 09, 2004 12:50 PM To:l 1(ITD) (FBI)J ' l(ITD) (FBI^I (ITD) (FBI);| | ( ITD)(CON)C (CON) Subject Tasking

/esterday, June 9 for this patch.

• I (ITD) (FBI); [ ÌTTD) (CONif

b2 b6 b7C b7E

I f r o T


We need to issue a tasking tc£ to

Institute a software patch that will provide the RedWolf System with the capability to monitor user actions within the application. Events to be monitored should include : Login , logout, Session open, session delete, change review • status, forward session, transcript, as well as all other tasks generally associated with RedWolf user utilization of the system.

The resulting Audit Trail Logs should be accessible only by system administrator level personnel



757

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED

, DATE 02-19-2009 BY 60322 UC/LP/STP/JCF OTP) (FBI) .

From: (FBI) Sent: Thursday. June 10 ?004 ? 09 PM To: I J f l T D ) (FBI) Cc: f nnTD) (FBI) Subject: RedWolf redundant database

b2 b6

SENSITIVE BUT UNCLASSIFIED NON-RECORD b / E

I'm sending this to both of you because I'm not sure I have the correct e-mail addresses!

lalthouohT lis happy with the new system you are sending. If possible, or if you have end of year money, could Jget a redundant database for our RedWolf System. The |price tag is probably still less thanj jfour •flta f>\/f>fam« Tk!«» ta/il! inltK riof^ ra^/MiAm in fkfi «w^^S^ ' ^^T^iIrir« Thnnl/e separate systems. This will assist with data recovery in the event or a laiiure. Thanks again.


753


ALL INFORMATION CONTAINED HEREIN 15 UNCLASSIFIED DATE 02-19-2009 BY 60322 UC/LP/STP/JCF

(OTP) (FBI)

J(ITD) (FBI) Wednesday, June 23, 2004 2:47 PM

1 l( TD) (FBI) Meeting with EAD

b6 b7C

DCS-5000.ppt (115 KB)

NON-RECORD SENSITIVE BUT UNCLASSIFIED

| | wanted us to put something together for Mrj [• I think

Here is my input.

At the request of Language Services Section, Office of International Operations (OIO), S S A [ and ET attended a meeting to discuss the Work Flow Manager (WFM) currently in place for use with the

DCS-5000 / RedWolf systems.

Attending the meeting were : b2 b6 b7C b7E

J(CTD)

rCTD)

1(010)

( 0 1 0 )

Mr J was interested in the capability of the WFM to gather and report data which could assist him in 746

decision making regarding the collection and processing of FISA intercepts. We provided Mr.l Iwith a brief overview of the interaction between the DCS 5000 and WFM (PPT presentation attached). We also discussed some of the existing query/report capabilities of WFM and the possibility of developing case based or language based queries in the future. The discussions also addressed the 'tier' prioritization scheme being implemented for FISA cases, and how this could be included as feature of the DCS-5000 and WFM. We agreed that a follow-up meeting should be held which included representatives of the FISA Management Systems and

Jto insure that we have a more complete picture of the process and possible technical solutions.

Language Services will coordinate the follow-up meeting. b2 b6 b7C b7E


747

(OTP) (FBI)

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED DATE 02-19-2009 BY' 60322 UC/LP/STP/JCF•

From: Sent: To:

Cc:

Subject:

tCON) Mnnriav lnnp?1 ?nndT l f ì Pi '

JEBD C

O RE: R(

3 (FBI); |

(CON) edWolf redundant database

(ITP) (FBÔT ÏÏCON)!

1(ITD)(FBI):I \(\TD) (FBH

| ( C O N ) L _ _

|(ITD)


b2 b6 b7C b7E

We are looking at having the! server. We will also need I software and|

Idatabase solution. We will need a second Isolution which includes I Iserver

Iserver software. Thel I server software will provide

These capabilities are also outlined on Attachment-4 of the proposal for dated May 6, 2004.

Let me know if you have any other questions.

-Original Message-FromC Sent: Monday, June 21, 2004 7:38 AM

] (FBI)

To Cc Subject: FW: RedWolf redundant database

:ON) (CON)


b2 b6 b7C b7E

Please provide them with the particulars —Or ig ina l Message From:| |(UD) (FBI)

' " 17. 2004 3:50 PM i m i

Sent: Thursday, June TO Cc: J(ITD) (FBI);L Subject: RE: RedWolf redundant database

] ( ITD) (FBI);!" ' ( ITD) (FBI)

SENSITIVE BUT UNCLASSIFIED 749

NON-RECORD

In order to best understand the particulars of what you are asking, I'll haveQ Icontact you in regards to this request. Since your new system is already on order, it will take a separate purchase order to procure a data base backup system. We'll look into it

MJ

Original Message Fromj j (FBI) Sent: Thursday, June 10, 2004 2:09 PM To: Cc: Subject: RedWolf redundant database

pTD) (FBI) ITD) (FBI) b2

b6 b7C b7E


I'm sending this to both of you because I'm not sure I have the correct e-mail addresses!

coulc although

a is happy with the new system you are sending, If possible, or if you have end of year money,

lget a redundant database for our RedWolf System. Thel ~ 1 price tag is probably still less than bur separate systems. This will assist with data recovery in the event of a failure. Thanks again.





750


(OTP) (FBI)

From: I I(ITP) (FBI) Sent: WgrinRsriav .lung 93 ?QtM 5:05 PM To: ,1 _ , I (ITD) (FBI) Cc: I iTTDl (FBI) Subject: RE: Meeting with EAD| |


Hello Guvs, ]when you return, provide Mr.| ¡with a brief (written) regarding your meeting at FBIHQ, asL

has prepared.. At this level, our Section Chief should be in the know in the event he receives a call for clarification. Let's attempt to complete this task ASAP.

Thanks,

b2 b6 b7C b7E

—-Original Message--— Fromi ~ldTD) (FBI) Sent: Wednesday, June 23, 2004 2:47 PM Toj I (ITD) (FBI) Cc\ |(ITD) (FBI) Subject: Meeting with EAD


b2 b6 b7C b7E

| [wanted us to put something together for Mr.j ~ j - 1 think

Here is my input.

At the request of Language Services Section, Office of International Operations (OIO), SSA ET[

and ^attended a meeting to discuss the Work Flow Manager (WFM) currently in place for use

with the DCS-5000 / RedWolf systems.

744

Attending thé meeting were :

I C T D )

(CTD)

( 0 1 0 )

(010) b2 b6 b7C b7E

Mr. I [was interested in the capability of the WFM to gather and report data which could assist him in decision making regarding the collection and processing of FISA intercepts. We provided Mrl with a brief overview of the interaction between the DCS 5000 and WFM (PPT presentation attached). We also discussed some of the existing query/report capabilities of WFM and the possibility of developing case based or language based queries in the future. The discussions also addressed the 'tier' prioritization scheme being implemented for FISA cases, and how this could be included as feature of the DCS-5000 and WFM. We agreed that a fol Systems and| solutions.

ow-up meeting should be held which included representatives of the FISA Management to insure that we have a more complete picture of the process and possible technical

Language Services will coordinate the follow-up meeting.



745




Total Deleted Page(s) ~ 5 Page 224 ~ Duplicate Page 225 ~ Duplicate Page 316- b2, b7E Page 317- b2, b7E Page 318- b2, b7E

XXXXXXXXXXXXXXXXXXXXXXXX X Deleted Pagete) Xw X No Duplication Fee X XXXXXXXXXX^XXXXXXXXXXXXXX

(Rev. 01-31-2003)


FEDERAL BUREAU OF INVESTIGATION

Precedence: ROUTINE

To: Date: 11/04/2004

Attn: b2 b6 b7C b7E

All SSAs

From:

F.LSUR

Investigativi Contact : SA

Approved By:

Drafted By:

Case ID #: d j g

66-1871 6 6 F - 1 66F-66F-

( Pending) 5 (Pending) A77710 (Pending) 86020 (Pending)

Title: Revised Procedures- for Handling'Title 50 (FISA) Electronic Surveillance ^(ELSUR) Material from the Red Wolf Digital Collection System

Synopsis : Di a. system and a

to the ipstallation of a new FISA digital collection workstation, the procedures outlined below

J Division communications clarify and supercede all previous[ pertaining to the FISA digital collection system.

Details: The purpose of this document is to articulate policies and procedures for the proper handling of the £ Disks that are used to archive Title 50 (FISA)' Electronic ; Surveillance (ELSUR) material removed from the Red Wolf digital collection system. These procedures will ensure that proper "quality control" practices are in place to prevent the loss of any intercepted material and to maintain the integrity and chain of custody of the material. These procedures will follow the FBI's ELSUR guidelines.

To: From: Re: 66-1871, 11 / 0 4 / T U W

The| |FISA digital collection system was replaced and upgraded since the previous policy was approved. I I

Due to the features of this new digital collection system, the procedures o u t l i n e d below clarify, simplify and supercede all subject matter.

b2 b7E

communications pertaining to this

2



Serial Description ~ COVER SHEET

Total Deleted Page(s) ~ 1 Page 56 - b2, b7E

XXXXXXXXXXXXXXXXXXXXXXXX X Deleted Page(s) X.


(OTP) (FBI)

From: Sent:

Z J l T D ) (FBI) 72QC Sent: Ihurcrtav lannary 13, 2005 3:48 PM

To: ,l —Jcoi) (FBI):l" IITD) (FBI) Cc: I f i T m (FRiyi r m (FBI) Subject: RE: OIG Closeout Due 01/19/2005 Recommendation 7


-Original Message—-.- b6 b7C

-—or ig ina l Message----.-From:| jOI) (FBI) Sent: Thursday. January 13. 2005 10:40 AM b7E

. 1 (ITD) (FBI); | |(rTD) (FBI) Cc:] | (ITD) (FBI) Subject: RE: OIG Closeout Due 01/19/2005 Recommendation 7


Gentlemen,

The deadline for closing out the recommenations from the OIG audit is 01/19/2005. The verbiage below if from our previous response to recommendation 7 . In reviewing the previous response, it seems we have responded primarily to the issue of )ut we have not responded to the issue o £ J' lease

845

advise:

The report needs to be delivered to OIG by 01/19, but I need to finish up by COB Friday to give it time to make it through all the hoops.

] Language Administration and Acquisition Unit Language Services Section

b2 b6 b7C b7E

846




Total Deleted Page(s) ~ 45 Page 130 - Duplicate FOIA 1083022 DR4 Page 131 ~ Outside the Scope Page 132 ~ Outside the Scope Page 147- b2, b4, b7E Page 148 ~ b2, b4, b7E Page 149 - b2, b4, b7E Page 150- b2, b4, b7E Page 165- Outside the Scope Page 166 - Outside the Scope Page 167- Outside the Scope Page 168 - Outside the Scope Page 169 - Outside the Scope Page 171 - Outside the Scope Page 172 - Outside the Scope Page 173 - Outside the Scope Page 174 - Outside the Scope Page 175 - Outside the Scope Page 176- Outside the Scope Page 179- Duplicate Page 180 - Duplicate Page 181 - Duplicate Page 182- Duplicate Page 183 - Outside the Scope Page 184- Outside the Scope Page 185 - Outside the Scope Page 186 - Outside the Scope Page 187- Outside the Scope Page 188- Outside the Scope Page 190 - Outside the Scope Page 191 - Outside the Scope Page 192 - Outside the Scope Page 193 - Outside the Scope Page 194 - Outside the Scope Page 195- Outside the Scope Page 196 - Outside the Scope Page 198 - b2, b4, b6, b7C, b7E Page 200 - b2, b6, b7C, b7E Page 201 - b2, b6, b7C, b7E Page 202 - b2, b6, b7C, b7E Page 203 - b2, b6, b7C, b7E Page 204 - b2, b6, b7C, b7E Page 205 - b2, b6, b7C, b7E Page 251 - Duplicate Page 252 - Duplicate

XXXXXXXXXXXXXXXXXXXXXXXX X Deleted Page(s) X X No Duplication Fee X )boa)o!x>ixSxxxxxxxxxxxxxx

~ Duplicate

xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Pageis) X. X No Duplication Fee X )bcxx)o!x>acxSxxxxxxxxxxxxxx

(OTP) (FBI)

ALL INFORMATION CONTAINED DATE: 04-27-2009 HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fIs WHERE SHOOT OTHERWISE REASON: 1.4 (c)

DECLASSIFY ON: 04-27-2034

From: Sent: To: Cc:

Subject: (S)

r ]<ITD) (FBI) Tuesday. March 15. 2005 1:00 PM

I (ITD) (FBIL iïlTm (FBI);

IFB1L J^ed Wolf Interface effort

] ( ITD) (FBI); (ITD)

bl b2 b6 b7C b7E

don't believe I've met you before, but want to introduce myself to you as one of the SSA's assigned to I I S P T U . O n e Of h is P r o g r a m s ! _ _ J has been tasked to deliver the evic

Tknowl lis aware of this as thel

[ hngineers have enlisted his invaluable nelp on several occasions already[ Ï3y

] The effort has gotten to the point where I thought it would be appropriate for me to reach-out to you for some other "needs" that we have, and also start cutting you and Q n t o our efforts.

over thejaast 2 Weeks,I |has determined that the As a result of[ ¡sessions at_ following modifications/enhancements are needed for ouj |RW systems (preferably prior to being

sent-out from

1 |

2

4. Upgrade RW Software to newest version.

If it helps re the licensing issues, please stress to ]that The purpose of these systems is only tor

[

into Red Wolf in a format as currently specified by Red Wolf. We. understand that if any of these changes need to be incorporated into the deployment package for Red Wolf, that another effort will be required with

]nto Red Wolf is exploratory and we I

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability of ouf |we anticipate that there will be questions/interface needs with Raytheon Engineers. Is there a contracting vehicle available that already exist for us to take advantage of, or will this be an additional task withl

551

You've probably.got some questions about the basis for our needs here, so feel free to give me a call and we can sniff-out the next best step in our RW Interface effort.

Thnx-

Regards,

Special Projects Technology Unit Investinative Technology Division Desk:l J Cell:

552

S E Ì ^ T

(OTP) (FBI)

ALL INFORMATION CONTAINED HEREIN IS UNCLASSIFIED EXCEPT DJHERE SHOOT OTHERWISE

DATE: 04-27-2009 CLASSIFIED BY 60322 uc/lp/stp/fIs REASON: 1.4 (c) DECLASSIFY ON: 04-27-2034

(S)

To: t s \ Çç-^ ' Subject:

I T P ) (FBI)

"RËr[ ZJ( ITD) (FBI);[ JRed Wolf Interface effort

(ITD) (CON) bl b2 b6 b7C b7E

;o have a brief meeting with U C Q a n d myself so that we can have a better jit doing with it in regards to Red .Wolf. Also, I suggest

It would be best understanding a more detailed meeting with DCS-5000 team members after you get more results from Raytheon (I know you are already communicating with I I In speaking today with I I Raytheon, they are already working on the suggested changes and look forward to assisting SPTU in any way possible. I will have one of our contracts personnel| | look into your queries re a contract vehicle for SPTU to take advantage or if a separate task order is the way to go. I tend to think the answer will side with the latter, but I will defer to others more experienced in this area. I look forward to meeting you....

] Original Message-

From: ](ITD) (FBI) Sent: Tuesday, March 15, 2005 1:00 PM

(S)

To: Cc: (FB

J(rTD) (FBI) (ITD) (FBI);

I (ITD) (FBI); (HD)

Subject: Red Wolf Interface effort

^ENSïTtVE-BUJ UNCLASSIFIED NON-RE€OKir

<SJ

(SJ Hi

don't believe I've met you before, but want to introduce myself to you as one of the SSA's (S) assigned to[

thè evidence (S) R i s a s i

( S )

ISPTU. One of his Programs fcas been tasked to deliver is aware of know

"frave enlisted his invaluable help on severafoccasions already The effort has gotten to

the point where I thought it would be appropriate for me to reach-out to you for some other ''needs'' that we have, and also start cutting you and [~ |into our efforts.

As a result otj [sessions a1| , i i the following modifications/enhancements are needed for ouiTlRW systems (preferably prior to

]over the past 2 w e e k s | h a s determined that

548

(S)

being sent-out from

n 2.

4. Upgrade RW Software to newest version. bl b2 b7E

If it helps re the licensing issues, please stress to that I The purpose of these systems is only for

pnto Red Wolf in a format as currently specified by Ked Wolf. We understand that it any of these changes need t o b e i n r a r p n r a t e r l in to thf* r l p n l f w m f t n t n a r . k a n f * for R p H W n l f t h a t a n n t l w fiffnrt w i l l h p ramiirFiri

with Raytheon.

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability of our] |we anticipate that there will be questions/interface needs with Raytheon Engineers. Is there ä contracting vehicle available that already exist for us to take advantage of, or will this be an additional task with

You've probably got some questions about the basis for our needs here, so feel free to give me a call and we can sniff-out the next best step in our RW Interface effort.

Thnx-

Regards,

b2 b6 b7C

Special Projects Technology Unit Investigative Technology Division Desk:! Cell:!

549

S ^ E T

(OTP) (FBI)

ALL INFORMATION CONTAINED D A T E : 04-27-2009 HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fls WHERE SHOWN OTHERWISE REASON: 1.4 (c)

DECLASSIFY ON: 04-27-2034

From: Sent: To: Cc:

Subject:

(ITD) (FBI)

(S )

Ti iPcHaw Marrh I f i 9nnS fl-M P M

TP) (FBI); I

(ITH) ÎFRIil l i lTD) (FBIV

JRed Wolf Interface effort J(ITD) (FBI)

i l(l"P J(ITD) (FBI);[ (ITD) (FBI)

N Ö N ^ R E C Q R ^ -

bl b2 b6 b7C b7E

All,

spoke with f requestec

]briefly this afternoon addressing the requests listed below. We've for a quote to perform the four tasks described below. In addition, we have a

mechanism in place to provide some technical support. A more comprehensive technical support plan is being discussed. In the meantime, we should get a quick response iri order to review the expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing

( S ) started as quickly as. possible.

TK nrnrggri forward we plan to integrate a bi-weekly technical discussion/status mtgs between will send a notification with details when this is established. Tentatively striving

for next Tues afternoon. Please let me know if you have any further questions/concerns.

Regards,

( S I

—Original Messaqe-From :l

To:l

] (m>) (FBI) Sent; Tue?fov, Mgrçh 15, 2005 1:00 PM

(ITD) (FBI), Cc: (ITD) (FBI); (FBI) Subject; Red Wolf Interface effort

(ITD) (FBI); (ITD)

~SERSfFIVE-BUTUNCLASSTFIËp' NON-

HlCZ] I don't believe I've met you before, but want to introduce myself to you as one of the SSA's

698

sEp^n

. (S) :

assigned to[~ ( S ) the evidence

this asf

J

ISPTU. One of his Programs as beep taskeçj to deliver is aware of

has been JI know|_

l iave enlisted his invaiuaoie help on seveTâToccasions already The effort has gotten to

j g i the point where I thought it would be appropriate for me to reach-out to you for some other ^ ' "needs" that we have, and also start cutting you and| |nto our efforts.

(S) As a result of sessions at| "lover the psst_2 weeks [determined that the following modifications/enhancements are needed for ou being sent-out from

RW systems (preferably prior to

1

2.


If it helps re the licensing issues, please stress tc| jthat The purpose of these systems is only for

(S)

with

bl b2 b6 blC b7E

into Red Wolf In d format as eutYShtiy Sp6tlti£d by K6d Wblt. We underfctahd that it any of these changes need to be incorporated into the deployment package for Red Wolf, that another effort will be required

into Red Wolf is exploratory

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability of ou| we anticipate that there will be questions/interface needs with

Engineers, is there a contracting vehicle available that already exist for us to take aovantagè of, or will this be an additional task with


Thnx-

Regards,

Special Projects Technology Unit Investigative Technology Division Desk! I Cell:

sj&^ET 699

ET ALL INFORMATION. CONTAINED DATE: 04-27-2009 HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fIs

REASON: 1.4 (c) DECLASSIFY ON: 04-27-2034

WHERE SHOOT OTHERWISE

(OTP) (FBI)


(S )

I l(ITD)(FBI) Wednesday. March 1fi 2005 8:14 AM

I l(ITD) (FBI) RE: Red Wolf Interface effort

Thanks for the quick response

bl b2 b6 b7C b7E

3)

-—OriqinalMessage-From: 3 (ITP) (FBI) Sent: Tuesday. March 15. 2005 3:36 PM T n : l I r i T P ) fFBD.-f Cc: l I OTP) (FBI):! (FBIÏÏE Subject: RE:

J(ITD) (FBI)

l(ITD) (FBI) (ITD) (FBI); (ITP)

Red Wolf Interface effort

" S E R S m V e ^ U T ^ U N C L A S S l F l E P '

All,

I spoké withl I briefly this afternoon addressing the requests listed below. We've requestedl for a quote to perform the four tasks described below. In addition, we have a mechanism in place to provide some technical support. A more comprehensive technical support plan is being discussed. In the meantime, we should get a quick response in order to. review the expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing started as quickly as possible.

T n prnr.Rftr i f o r w a r d w e plan to integrate a bi-weekly technical discussion/status mtgs between ERFj J will send a notification with details when this is established. Tentatively striving for next Tues afternoon. Please let me know if you have any further questions/concerns.

Regards,

S t 173

-Original Messaqe-Froma. ](rTD) (FBI) Sent: Tuesday, March 15, 2005 1:00 PM To:) . If lTm (FBI) Ccj l(ITD) (FBI); (FBI) . Subject:

(ITD) (FBI); (ITD)


slNSiTtVE-BUTUNCLASSIFlËP NON-RECQRP

bl b2 b6 b7C b7E

Hi[

I don't believe, assigned to

I've met vou before, but want to introduce myself to vou as one of the SSA's

deliver the evidence! aware of this as

JL

ISPTU. One of his Programs ]has been tasked to know

i n î n ^ f i n t H ^ j i i a i î P H i i i m g i a i B i î i m älreadv

several çccasions The effort

is

has gotten to the point where I thought it would be appropriate forme to reach-out to you for some other "needs" that we have, and also start cutting you a n d l i n t o our efforts. ,c .

(S) W over the past 2 weeks£ As a result of| I sessions a^ over the past 2 weeksj Idetermined

that the following moditicat ons/enhancements are needed for o u Q R W systems (preferably prior to being sent-out frorrj

1 .

2.

3.


that If it helps re the licensing issues, please stress to, .. I I The purpose of these systems is only for

|into Red Wolf in-a format as currently specified by Red Wolf. We understand that if any of these changes need to be incorporated into the deployment package for Red Wolf, that another effort will be required with£ into Red Wolf is exploratory and we

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability of oD We anticipate that there will be questions/interface needs with

]Engineers, is mere a contracting .vehicle available that already exist for us to take advantage of, or will this be an additional task with

ET 174


Thnx-

Regards,

Special Projects Technology Unit Division

Cell:

b2 b6 b7C

Investigative Technology Deskl

i 'ï

• ( O T P ) (FBI)

: ALL INFORMATION CONTAINED • HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOWN OTHERWISE •

DATE: 04-27-2009 •< CLASSIFIED BY 60322 uc/lp/stp/fIs REASON: 1.4 (c) . DECLASSIFY ON: 04-27-2034' '

From: Sent: To: Cc:

Subject:

](ITD) (FBI) Wednesday. March 16. 2005 2:44 PM

.TP^ fFBn

(S) (ITP) (CON) FW:

] ( ITD) (FBI); ] ( ITP) (FBI);

jRed Wolf Interface effort

^lÈNSÌTTVElBtff4JN€t5SSlFÌEp

bl b2 b6 b7C b7E

It would be best to have a brief meeting with UCl [and myself so that we can have a better understanding of what [it doing with it in regards to Red Wolf. Also, I suggest

If a more detailed meeting with DCS-5000 team members after you get more results fromf know you are already communicating with| j In speaking today "withj_ they are already working on thè suggested changes and look forward to assisting SPTU in anyway possible. I will have one of our contracts person nel | I look into your queries re a contract vehicle for SPTU to take advantage or if a separate task order is the way to go. I tend to think the answer will side with the latter, but I will defer to others more knowledgeable. I look forward to meeting you....

Original Message-From : I ] (ITP) (FBI)

(S) Sent: Tuesday, March 15, 2005 3:36 PM " l(ITD) (FBI); To:] Cc: (FBI); Subject: RÈ

(ITP) (FBI); J(ITD) (FBI)

(ITP) (ITP) (FBI)

(FBOCZ ](TTD)

*ed Wolf Interface effort

SENBrnVE-BUT UNCi-ASSfFÎËP^ NON-REC

All,

I spoke With requested

briefly this afternoon addressing the requests listed below. We've Jfor a quote to perform the four tasks described below. In addition, we have a

mechanism in place to provide some technical support. A more comprehensive technical support plan is being discussed. In the meantime, we should get a quick response in order to review the expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing

S E ß t f E T 170

S g & ^ E T

started as quickly as possible.

To proceed forward, we plan to integrate a bi-weekly technical discusslon/status mtgs between will send a notification with detajls when this is established. Tentatively striving


Regards,

—Original Message-From:|

bl b2 b6 b7C b7E

1ITD) (FBI) Sent: Tuesday, March 15, 2005 1:00 PM To: Cc:

J(ITD)(FBI) (ITD) (FBI);

) Subject:

(ITD) (FBI); (ITD)


SEflSfflVE-BUT UNCLASSIFTEíT NON-RE

Hi

I don't believe I've met vou before, but want to introduce myself tn von as one of the SSA's assigned t'ol ISPTU. One of his Programs! |has been tasked to deliver the evidence! |to Red Wolf (RW). I khowl this a s } ~ | have enlisted his invaluable help on several occasions already

I The effort has gotten to

is aware of

the point where I thought it would be appropriate for me to reach-out to you for some other "needs" that we have, and also start cutting you and| jinto our efforts.

As ä result Öf sessions at l ove r t he pasL2 determined that the following modifications/enhancements are needed for our|_JRW systems (preferably prior to being sent-out from|

1.

iL

3.

4. Upgrade R\A/ Software to newest version.

If it helps re the licensing issues, please stress tc that lThe purpose of these systems is only for

into Red Wolf T7T

I

in a format as currently specified by Red Wolf. We understand that if any of these changes need to be incorporated into the deployment package for Red Wolf, that another effort will be required withl Into Red Wolf is exploratory and we are still gathering information.

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability of ouj |we anticipate that there will be questions/interface needs with

I lEngineers. Is there a contracting vehicle available that already exist for us to take advantage of, or will this be an additional task with


Thnx-bl

• • b2 b6

Regards, b7c ' . b7E

Special Projects Technology Unit Investigative Technojogy Division Desk:! Cell:

S Ì ^ E T

""(OTP) (FBI)

ALL INFORMATION COBTAINED D A X E : 04-27-2009 HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fIs

REASON: 1.4 (c) DECLASSIFY ON: 04-27-2034

WHERE SHOOT OTHERWISE

To: Cc: Subject:

[

( S ) FW

T l(ITD) (FBI) l ü I D I Í U i lD i iFB I )

bl b2 b6 b7C b7E

As mentioned earlier, I think it would be best if TICTU shares a posture of allowing SDPU do their testing with TICTU provide advisitory support until SPDU efforts finalize.

c J Supervisory Special Agent Telecommunications Intercept and Collation TP Jnnloav Unit (TICTU)

Original Message-Fromil ] ( I TD) (FBI) Sent: Friday. March 18. 2005 2:04 PM To: Cc:

k n p ) (FBi) I (ITD) (FBD i

Subject: RE: I (UP) (FBI) Ï ITP) (FBI); I

j r T D ) (FBI);[

I (ITD) (FBI);!" ÏTTD) ( F B I ) ; r J (ITD) (FBI);

(ITD) (FBI)

l ( ITD) (FBI);

m^lCfcASJSIFigD^ N O N ^ E g D R D *

( S )

It was under our impression from discussions with the[ lengineers thatl lis already supported on their 1 They thought it wniilri hfi iust a simnlel Ito enable this feature for our

R Again, we stressi Jwould be the most cost effective and simple

solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the interpretation of the C.O manufacturers and Redwolf developers and does not support (in our interpretation! J Another ERF

for a solution to interface! Tint Engineer^ provide a solution forj

I I was the best solution tor[_

l i s looking atl~ into the Redwolf and lengineers informed us that

This request for the four items is to allow us to begin to evaluate[ what

From this, we can determine will/won't support and return our recommendations for better support and integration. We have to oet the

systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at[_ during training, would provide a quick way to get started on evaluation for future use. We already have other changes that

• we would like to have designed into the Redwolf but knew it would require major engineering changes/development by | 1 These items would be discussed at a later time withl land other engineers! I

We do agree that there may and will be problems withl out we will find them through our testing. Again it was our unrierstanriinn thatl I Engineers at Raytheon believed thatj

is not left out. Right now, we need to see whatl I will/won't do so that we can mma to the table with I But this engineering changes. During this same time,I ~ lp a n Hpfing

would be major engineering design changes/effort on

S ^ É T

part.

518

( S )

SSA

concurrence with àtl

Thanks

Iwil l be contes, mg

ITD - Electronic Surveillance Technology Section Special Projects Technology Unit (SPTU) Work #: Pager #:

for further management discussions. The above statements are in y

bl b2 b6 b7C b7E

( S )

-----Original Message-— From: |_ J (ITD) (FBI) Sent: Friday. March 18. 2005 12:14 PM

, I (ITD) (FBI}¿ Cc:l FTP) ( F B I ) ; [ _ Subject:

] (UD) (FBI) ](TTD) (FBI); ](ITD) (FBI)

All,

I don't intend to make any further preparations until management has a discussion and determine what our involvement is, if any. Also, how doesl Iresponsibilitiesl I fit into this project, if any? Are her development/testing efforts combined with your efforts? This too needs to be addressed by management.

(S) ... With that asidej ~~1is working the initial four requests. They have several concerns:! 1 1 unsure what! , Iwill do to the system performance/reliability,[

lis presenting major heartburn. You may have to assume some RISK in order to proceed with .your testinq.Jn order to help expedite things, can we|

[This may determine if the system can perform reliably enough to upgrade the others and proceed with more robust testing. This will be the first of many benchmark tests. Let me know your thoughts-

Status

E T All INFORMATION CONTAINED HEREIN 15 UNCLASSIFIED EXCEPT WHERE SHOWH OTHERWISE


From: Sent: To: Cc:

Subject:

( S )

NON^KEfrORO

( S I

] (ITD) (FBI) Friday March 1fl ?nns 2:04 PM

HlTP) (FBI)

(FB RE:

E KlTD^ fFBIV

(ITD) (FBI)Lr (ITD) (FBI);

TD) (FBI); | H u û i t ë u :

|ZZ] (ITD) (FBHj_ 7ÎTD) (FBI):I

j(ITD) (FBI) J ÌTDT bl

b2 b6 b7C b7E

It was under our impression from discussions with the[

Ï

I engineers thatf They thought it would be just a simplel

lis already supported on their I to enable this feature for our

Again, we stresj ]would be the most cost ettective and simple

solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the interpretation of the C.O. - - - - - ' J Another ERF manufacturers and Re

Engineer,! and does not support (in our interpretation!

provide a solution tori | |was the best solution for|^

1 for a solution to interface L ] engineers

into the Redwolf and informed us that

t for the four items is to allow- us to begin to evaluate! - I From this, we can determine ill/won't support and return our recommendations for better support and integration. We have to get the

This whatl . . . systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at|_ during training, would provide a quick way to get started on evaluation for future use. We already have other changes that we would like to have designed into the Redwolf but knew it would rpnnjre major engineering changes/development by

These items would be discussed at a later time with! l^nd other engineersf | w e ao agree that there may and will be problems withL it was our understanding that!" believed that

J but we will find them through our testing. | Engineers a f

Again

CS)

|is not left out. Right now, we need to see what! 1 will/won't do so that we can come to the table with engineering changes. During this same time,| ~ can define! 1 But this would be major engineering design changes/ettort or) I part!

concurrence with aH

Thanks

Twill be contacting for further management discussions. The above statements are in

ITD - Electronic Surveillance Technology Section Special Projects Tsnhnnlpnv Unit (SPTU) Work #: Pager #:

----Original Message From:| (ITD) (FBI) Sent: Friday. March 18. 2005 12:14 PM

(ITD) (FBI); To[

T

(ITD) (FBI); (ITD) (FBI)

669

fs) Ce S u i v i e ?

S ^ t î

ÌOTQ) fFBI); (UD) (FBI)


bl b2 b6 b7C b7E

Ail,

( S ) ..UVIIIllHVMUlUMiy^OIIJ IUIMIVI ^l^ft involvement Is, if any. Also, how does) development/testing efforts combined with your efforts?

I don't intend to make any further préparations until management has a discussion and determine what our ' ' responsibilities! jfi

his too needs to be addressed by management. it into this project, if any? Are her

With that aside,I 1 unsure whaf

lis working the initial four requests. They have several concerns: I ' Jwill do to the system performance/reliability ,1

iartburn. You may have to assume some RlsK" lis presenting major heartburn. You may proceed with your testing. In order to help expedite things, can we[

in order to

| This may determine if the system can perform reliably enough to upgrade tne otners ana proceed with more robust testing. This will be the first of many benchmark tests. Let me know your thoughts-

Status

I 1

g g O b f t S S I F j g r

Í J Ñ c t A s a F i g r "

SÈpRÊj 670

S È ^ R ^ f

Z(OTD) (FBI)

ALL.INFORMATION CONTAINED DATE: 04-27-2009 HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fls WHERE SHOWN OTHERWISE REASON: 1.4 (c)

DECLASSIFY ON: 04-27-2034 •


] (ITD) (FBI)

<S) , Friday Marnh 1fi ?nns 5:44 PM l _ , (ITD) (EßIL

FW~ J (ITD) (FBI); Red Wolf Interface effort

](ITD).(CON)

bl b2 b6 b7C b7E

( S J

[ <s) I want to reiterate that since SPTU has been tasked to to RW, it would be

best if SPTU runs with this and TICTU take an advisory role until after all testing/experimentation is completed. Consequently, any funding matters until completion should be borne with SPTU; afterwards,..? In talking with! Itodav. he lightly mentioned costs, but our discussion did not go much further singe I thought it would be better if| land I was briefed to gain a better understanding of rICTU and SPTU engage in those technical meetings you suggested below. There simply is not enough information for TICTU to chew on at this time which would afford us a better understanding of what needs to be accomplished and our.role in accomplishing it. Default any monetary questions to me] 1 You are doing a terrific job assisting SPTU during this phase and I am confident that will continue. I will be OOD until Thursday; call me on the cell if you feel more is needed or you have any suggestions.

] please look into the funding queries mentioned below. Thanks.

] —Original Message-F r o m : l iQTD) (FBI) Sent: Wednesday, March 16. 2005 2:44 PM To:

( S ) - C c (CON) Subject: FW:

frlP) (FBI) (ITD) (FBI)l ](ITD) (FBI); (ITD)


S E Ñ S F H V E J 3 U T U N C L A S S t F t E í f NON-RE

( S )

• It would be hfts-t t n h a v p a hr ipf mPPt inn w i th

understanding a more detailed meeting with uub-buuu team

| and myself so that we can have a better t doing with it in regards to Red Wolf. Also, I suggest members after you get more results from| |(l

166

s ^ k f ^ r know you are already communicating with In speaking today with they are already working on the suggested changes and look forward to assisting SPTU in any way possible. I will have one of our contracts personnell | look into your queries re a contract vehicle for SPTU to take advantage or if a separate task order is the way to go. I tend to think the answer will side with the latter, but I will defer to others more knowledgeable. I look forward to meeting you....

Í S )

-—Original Messaqe-From: (ITD) (FBI) Sent: Tuesday. March 15. 2005 3:36 PM To: Cc: (FB: E

l ( r r p ) (FBI); I (ITD) (FBI);

Subject: RE: (ITD) (FBI)

I ( ITD) (FBI) J (ITD) (FBI); (ITD)


SEN§ÌT1VE~BUT U N C J a A S S l F l E D ^ N O N - R E G Q R E T

bl b2 b6 b7C b7E

All,

( SJ\

I spoke with] I briefly this afternoon addressing the requests listed below. . We've requested for a quote to perform the four tasks described below. In addition, we have a mechanism in place to provide some technical support. A more comprehensive technical support plan is being discussed. In the meantime, we should get a quick response in order to review the expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing started as quickly as possible.

T n nrnr.ftpd fo rward , we plan to integrate a bi-weekly technical discussion/status mtgs between will send a notification with details when this is established. Tentatively striving


Regards,

Í S )

Original Messaqe-From: I n D ) (FBI) Sent: Tuesday. March 15, 2005 1:00 PM To: Cc: (FB:

](ITD) (FBI) (ITD) (FBI); (ITD) (FBI); i m

) Subject: Red Wolf Interface effort

167

S E N S m V E - B l J T UNQLASSîFïëD^ bl b2 be b7C b7E

(S) h Q

(S)

( S )

(S)

J don't believe I've met you before, but want to introduce rnvspif tn vnn as one of the SSA's SPTU. One of his Programs[_ assigned to

the evidericel this as!

has been tasked to deliver ]to Red Wolf (RW). I know( lis aware of

have enlisted his invaluable help on several occasions already The effort has gotten to

the point where I thought it would be appropriate for me to reach-out to you for some other "needs" that w© have, and also start cutting you and| jinto our efforts.

(S) Äs ä result of the following moomcations being sent-out frorr£

over the pasjL2 weeks£ ]determined that sessions at enhancements are needed for our l lRW systems (preferably prior to

2.


( S Î

If it helps re the licensing issues, please stress tq that, | I The purpose of these systems is only for

jinto Red Wolf in a format as currently specified by Red Wolf. We understand that if any of these changes need to be incorporated into the deployment package for Red Wolf, that another effort will be required withf into Red Wolf is exploratory

As we develop potential solutions to provide our data to Red Wolf in a way that will enhance the usability we anticipate that there will be questions/interface needs with

| |Engineers. Is there a contracting vehicle available that already exist for us to take advantage of, or will this be an additional task with| P ,


. Thnx-

Regards,

Special Projects Technology Unit

SÈpR^T 168

Investigative Technology Division DesKi Cell: b2

b6 b7C

S l R S m V E W l U I M C y ^ S S t F t E P ^

S 0 2 R F T

169

s f e K E T

(OTP) (FBI)

ALL INFORHATION CONTAINED HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOOT OTHERWISE

DATE: 04-28-2009 CLASSIFIED. BY 60322 uc/lp/stp/fIs REASON: 1.4 (c) DECLASSIFY ON: 04-28-2034

From: Sent: To: Cc:

Subject:

](ITD) (FBI) Wednesday March 23, 2005 10:28 AM

l( I (ITP) (FBIV

(S) "TP) (FBIVl

_J( ITD) (FBn£ OTP) fFBI)~

J(ITD) (FBI);[ r i i i f l i H s n

~ IdTD) TTiTDHFBI)

EEÜ1

] ( iTD) (FBI) ](ITD) (FBI);

bl b2 bo b7C b7E

U K T S L A S S I H E t ^ N O N - g e e O R D ^

h q

Good talking to you last week. I will he keepinn vnu cut-in as ws get closer to realizing what our needs will be based on our testing with his help as is:

interfacing withl re these needs. The status from has been great

so far

Status

We're still certain that we will need I l RedWolfs, so we can then make an accurate appraisal of the requirements needed for us to pump all of our ELSUR into Red Wolf. Just let me know what you need from me to pursue these 2 items.

Regards,

Special Projects Technology Unit Operational Technology Division Desk: l | Cell:

Original Message— From: I (ITD) (FBI) Sent : Friday, March 18, 2005 2:04 PM

(S) Cell (FBI)I

Subject: RE:

J f f i P ) (FBI) I (ITD) (FBI)£

— n O T D ) ^ iTrfD) (FBI);

ET

(ITD) (FBI);

1 (ITD) (FBIVJ FlTD) (FBI)a

I (ITD') I (ITD) (FBI);

(ITD) (FBI)

665

SÖSf^T

N

( S )

bl b2 b6 b7C b7E

It was under our impression from discussions with the| I Thftv thniifiht it would ha just a simnlaf

) Again, we stress)

lis already supported on their It tn enahlfi thisfaatnrtj for

Jwould be the most cost effective. and simple solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the interpretation of the C.O. manufacturers and Redwolf developers and does not support (in our interpretation]!

] Another ERF Engineer, I " l i s looking atl I for a solution to interface! Into the Redwolf and provide a solution for f Jengineers informed us that! Iwas the best solution tor|_

J

This request for the four items is to allow us to begin to evaluate! I From this, we can determine what! 1 will/won't support and return our recommendations for better support and integration. We have to get the systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at I [during training, would provide a quick way to get started on evaluation for future use. We already have other changes that we would like, to have designed into the Redwolf but knew it would require majorengineering changes/development by These items would be discussed at a later time with I I and other engineers

We do agree that there may and will be problems with!" Again it was our understanding that!

relieved that£

"Ibut we will find them through our testing. Engineers at

is not left out. Right now, we need to see what[ with engineering changes. During this same time,[ this would be major engineering design changes/effort on

can define will/won't do so that we can come to the table

But part.

( S ) SSA( are in concurrence with all

Thanks

Iwill be contacting r I f o r further management discussions. The above statements

ITD - Electronic Surveillance Technology Section Special F?roif?cts Tfinhnolqgy Unit (SRTU) Work #: Pager #:

Original Messaqe-From: | ](JTD) (FBI) Sent; Friday. March 18, 2005 12:14 PM

(SJ , To: | |(ITD) (FBI)£ tfBI) , rr-f- lrrrD)(FBI1:|

D (ITD) (FBI);[ ](ITD)

Subject: L( ITD) (FBI)

wjcPsSS lg ÍED^

666

bl b2 b6 b7C b7E

All,

I don't intend to make any further preparations until management has a discussion and determine what our involvement is, if any. Also, how does I 1 responsibilities! "|fit into this project, if any? Are her development/testing efforts combined with your efforts? This too needs to be addressed by management.

With that aside.l ¡is working the initial four requests. They have several concerns:! I fTmsure what! ¡will do to the system performance/reliability,! |

| is presenting major heartburn. You may have to assume some RISK in order to proceed with your testing. In order to help expedite things, can wel 1

| [This may determine if the system can perform reliably enough to upgrade the others and proceed with more robust testing. This will be the first of many benchmark tests. Let me know your thoughts-

Status

667

<S)

SEPR^T

(OTP) (FBI)

AIL INFORMATION CONTAINED DATE: 04-28-2009 HEREIN IS UNCLASSIFIED. EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fl WHERE SHOWN OTHERWISE REASON: 1.4 (c)

. DECLASSIFY ON: 04-28-2034


ì j f cSLASSlF fg t i ^ NONj^geORP"

](ITD) (FBI) Monday Anril 04 2005 3-1? PM

(ITD) (FBI)

FW: Hlf iM

bl b2 b6 b7C b7E

• . : ; : , •• I received a Technical Engineering Change proposal (hard copy) from| |is prepared

to modify one of TICTU's existing technical contracts to support SPTU's research efforts. I lis asking for a total of • | lObviously,

the question on the table is who is going to 'ante up' the chips for this hand in the venture.' When you get the chance,... please give me a holler to discuss this. Thanks.

r—Original Message From J IttTD) (FBI) Sent: Friday, March 18, 2005 2:04 PM . To: Cc:

H f f l P ) (FBI) . . • . ; _J(ITD) (FBI):! k r r p ) /'FBI):! I(ITD) (FBI):

|ÖTD)(FBn: l IOTP) ( F B I ) P ICTTD) (FBI)l

Subject: RE: I f lTDHFBni l KITD) (FBI);| j ( U P ) (FBI)

^UNÔtAg^F fÉD J j Q N ^ E C Ö R Ö " ^

It was under our impression from discussions with th j I engineers thai I is silreadv supported on their ! I Thev thought it would be just a simplel Ito enable this feature for our

I Again, we stressl Iwould be the most cost effective and simple

solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the interpretation of the C.O. manufacturers and Redwolf developers and does not support (in nur intfirprptatinnil | Another ERF

. Engineer,f "1 is looking atl Ifor a solution to interfacel fìnto the Redwolf and provide a solution for lengineers informed us that

]was the best solution for [

This reouest for the four items is to allow us to begin to evaluate! 1 From this, we-can determine what I Iwill/won't support and return our recommendations for better support and integration. We have to get the systems first to be able to preform this evaluation. These four items, in our view based upon our exposure atL during training, would provide a quick way to get started on evaluation for future use. We-already have other changes that we would like to have designed into the Redwolf but knew it would require major engineering changes/development by

| "| These items would be discussed at a later time withl land other engineers I I We do agree that there may and will he nrnhlsms withl Ihnt.we will find them through our testing. Again it was our understanding thaj| | Engineers at| ~|

SECRET lei

-<

believed that

S Ì ^ E T ;

( S )

I lis-nnt left out. Right now, we need to see what] Iwill/won't do so that we can come to the table with engineering changes. During this same timef lean define! | But this would be major engineering design changes/effort on] jjarT

SS/C concurrence with all

Thanks

Twill be contacting [ for further management dißcussions. The above statements are in

ITD - Electronic Surveillance Technology Section Special Projects Technology Unit (SPTU) Work #: Pager #:

b l b2 b6 b7C b7E

(S)

—Orig ina l Message—-From:| I (ITD) (FBI) Sent: Friday, March 18, 2005 12:14 PM To:l I (ITD) (FBI);f Cài _ IrrTDÌ CFBII: Subject!

J(ITD) (FBI) J U D ) (FBI); (ITD) (FBI)

U f t g L A S S i a e t ^ NON^RgeORD

All,

( S )

I don't intend to make any further preparations until management has a discuss involvement is, if any. Also, how.doesf Iresponsibilities[

on and determine what our fit into this project, if any? Are her.

development/testing efforts combined with your efforts? This top needs to t>e addressed by management.

With that aside! unsure what|

is working the initial, four requests. They have several concerns: | ]will do to the system performance/reliability ] îartburn. You may have to assume some RISK in orderlo" . fi's presenting-major heartburn

proceed with your testing J n order to help expedite things, can we jThis may determine if the system can perform reliably enough to upgrade the others and

proceed with more robust testing. This will be the first of many benchmark tests. Let me know.your thoughts-

Status

S ^ E T 162

AIL INFORMAIT OH CONTAINED HEREIN IS UNCLASSIFIED EXCEPT WHERE SHOWN OTHERWISE

(OTP) (FBI)


From: Sent: To: Cc:

Subject:

tJNCLASSlRElT NON^RE&ORD"

3OTD)(FBI)

(S )

Wednesday. Mav 11, 2005 4:06 PM Q T D )

K Y r m (tRH-r-ìQ 'T RE(

m r i ä s n JOTD) (FBI);

] (OTD) (BS1L J ÏÏÔTP) (FBI)

J(ITD) (FBI)

bl b2 b6 b7C b7E

Hi

We have been given the go-ahead for the enhancements as described below for our money for this purchase/contract modification is as follows:

Our

I know this is a bad time for more of this kind of paperwork for you all - what would you like us to do to get| |to move on this?

Thanx again for all your patience.

Regards,

Special Projects Technology Unit Operational Technology Division Deskf Cell:

Original Message—-From J I f i r m (FBI)

( S ) Sent: Monday. April 04. 2005 3:13 PM TO'TL IFRRM (FBI) Cci Subject: FW:

(HP) (FBI)

ÌJNCLASSIFJEfl^ NON^RggOBD"

N I received a Technical Engineering Change proposal (hard copy) from|_

prepared to modify one of TICTU's existing technical contracts to support SPTU's research efforts. I asking for a total of| |

I Obviously, the question on the table is who is going to 'ante up' the chips for this hand in the venture. 585

UNCLASSIFIED - Electronic Frontier Foundation · 2010. 9. 8. · which sits on the Informatio...

Documents

Transcript of UNCLASSIFIED - Electronic Frontier Foundation · 2010. 9. 8. · which sits on the Informatio...