>>7647105 (pb)

Have a look at the background of pic in post #

>>7647261 (pb)

Note Cozy Bear & Fancy Bear on whiteboard.

(initial)Summer 2015 = Cozy Bear

Aprl 2016 = Fancy Bear intrusion

May 2016 = CrowdStrike Discovers

June ... = Remediation Event

We may need to cross check Comey Brennan WH Visitor logs to this "event"....Where are the connections and timing to Cozy bear and fancy bear. Had to go up the CoC at some point. Correlated events to people + CoC = Narrative.