Internal TigerSwan Situation Report 2017-02-13

DAPL SITREP 154 February 13, 2017 John Porter Chief Security Officer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights questions, posted on his Facebook account, regarding destruction of an oil pipeline valve, were validated as legitimate. Marc Sanderson, one of the radical members, and a “Veterans Respond” leader, was in contact with three hours prior to the post. It is assessed that Sanderson is likely providing with guidance. Movements of possible weapons caches into Camp 2 indicate that groups within camp have progressed from the planning stage, to the preparatory phase, which includes logistics and personnel movement. There are no indications yet that the groups have moved into the operational phase. It is confirmed the primary method of secure communication among “Veterans Respond” is “Slack”. VR have at least three channels, one being general admin. There are no indications that VR has adopted unsecure RF communications used by camp security. The relationship between camp security groups and newly arrived veterans is tenuous, per embedded sources. The Details A. NORTH DAKOTA FUSION CENTER ii. Intel Update a. In an interview with TYT, a member of Veterans Respond stated that the group was there to clean up, build new structures on high ground, provide training, and participate in offensive actions. This is contrary to the former interviews that veterans were only there to provide training and peaceful assistance. This likely indicates VR having been influenced by extreme factions within camp, or that their original plan included conducting offensive actions against DAPLSEC and LE. b. Majority of veterans are spending their days assisting in building hardened structures and other logistical duties. c. “Veterans Respond” confirmed their use of a dedicated media team. This team is primarily working on production of propaganda pieces, and stated they will take images and video of actions for use in high profile #NODAPL media. iii. TigerSwan Past 24 Hours a. At approximately 1200 unidentified individuals were sighted removing weapons cases from a structure between Camp3 and Camp 4. ISR was tasked to PID vehicle and personalities involved. ATF and ND state LE intelligence were passed the information and media gathered from the event. Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS b. A member of Veterans Respond posted on Social Media regarding sabotaging valves in vicinity of Standing Rock area of responsibility. Social Media and further investigation revealed his presence within the camps, particularly Camp 4. iv. Next 24 Hours a. Integration of new intel personnel into ND Fusion center b. Conduct ISR over southern camps to assess build-up of structures and activity in Camp 4, 7, and 8. B. IOWA SECURITY ADVISORY ii. Intel Update a. “Bold Iowa” protesters have a statewide direct action planned for 22 February, 2017. • https://www.facebook.com/events/1819524311647044/ iii. Past 24 Hours a. Nothing significant to report. iv. Next 24 Hours a. Assess the Cambridge Pump Station and valve sites as needed. C. ILLINOIS FUSION CENTER ii. Intel Update a. Illinois activists have been relatively quiet, other than promoting national news pertaining to DAPL. A new telephonic action is promoted for activists to contact CEOs of financial institutions, urging them to divest from DAPL. This effort includes reviews of each CEO’s response to calls. • https://www.facebook.com/photo.php?fbid=10211651169775646&s et=o.538363336348345&type=3&theater iii. Past 24 Hours a. Conducted pipeline infrastructure security inspections and open source scanning of activists Facebook pages iv. Next 24 Hours a. Conduct pipeline infrastructure security inspections TigerSwan Prepared for Energy Transfer Partners 2