>>9096918(lb)

>Ghidra

Notable

Mentioned the idea of >its use on the site yesterday while downloading transcripts & starting to dig in.

Specific to Sussman's transcript over embedded media.. hm… Beckons further investigation!

Speaking of Sussman… Just so happens that's the transcript I've read and am summarizing.

My preliminary notes, pt. 1:

https://docs.house.gov/meetings/IG/IG00/CPRT-116-IG00-D078.pdf

p. 7

-Sussmann came to Perkins Coie after 12 yrs at US DOJ, was a 7 yr prosecutor in the Computer Crime and Intellectual Property Section there

-Deals w/companies that have had data breaches or with various cybersecurity needs

-Firm has biggest practice for compliance with 3rd party providers, facilitating the legal process

-He worked as a prosecutor of some computer hacking cases, chaired the US delegation to the G-8 subgroup on high-tech crime, did various work on European Commission and other international bodies

p. 8

-His work led him to engage with political parties, including the DNC, began representing them in April 2016

-A colleague at the firm told him that an IT Vendor for the DNC had been in touch w/the FBI for some time about ‘potential threats to the DNC’, cyber threats and that the FBI had made a request for some data. Sussmann was asked to speak to the IT vendor and speak w/the FBI, and provide advice to the client as to how they should proceed. Graham Wilson was the colleague who provided info & made request to Sussmann.

pp.11-13

-FBI was wanting DNC logs to ascertain who has or had not been accessing the DNC computer network

-Logs would show authorized users’ activity and ‘could show a variety of unauthorized users’

-490 authorized users, 500 users on the network, 10 users to reverse-engineer understanding of their unauthorized access

Will post to the devoted thread when finished & with a more succinct summary

>>9097315

Sussmann con't

p. 15-19

-in 2016 there was follow up communications

- “there was an early call with Crowdstrike, the forensic vendor ‘we’ brought in, to coordinate with them and introduce them to the FBI. We had several meetings over the course of my representation with the FBI on this matter with, various times, DNC leadership.”

- DOJ meeting RE their ‘criminal and intelligence investigation into the computer hacking’, guessing in Oct. 2016, where 10 people could have been there, including “WFO and the San Francisco office, and various AUSAs from other places”

- reported various incoming threats during course of Presidential campaign that he was a source to report to the FBI on

- met with Jim Trainer, then asst director for cyber

- Sussmann and Shawn Henry called Jim to “let him know that the story involving the DNC intrusion was going to be publicly reported and to just give him a heads up and let him know beforehand, and just to touch base.” They all 3 decided to have a future meeting.

-some meetings just w/FBI and one in Oct. was w/FBI & DOJ, one with FBI and DNC leaderhship

- at first meeting FBI informed hack was state-sponsored, and attackers were Russians, FBI had been following them a long time. Discussion of sharing info that Crowdstrike “was collecting with them, developing - you know, developing, ensuring open lines of communication. Things of that nature.”

- 2nd meeting Ms. Ruemmler (Sussmann’s attorney) said is classified

- Met w/FBI in mid-June of 2016 with Asst. Director Traynor and said the FBI could have any info that Crowdstrike was developing or had, & could deal with Crowdstrike directly, “So I know that sharing was going on.”

>>9097355

Sussmann con't

p. 20

-Sussmann received along with the client (DNC) a report from Crowdstrike, and it was shared with the FBI

- Sussmann was asked how the engagement with CrowdStrike came about, for them to be retained on behalf of the DNC, “So it was my recommendation, but the decision was the DNC’s”

- CrowdStrike officially retained on the last Friday in April of 2016

-shortly thereafter Sussmann on a call w/DNC, they found an intruder on the network, and he learned for the first time that “we” the DNC “had evidence that there, in fact, was an intruder on the network”. Sussmann then recommended that DNC immediately get the services of a security professional, and “I also recommended that they retain Shawn Henry and CrowdStrike”