Internal TigerSwan Situation Report 2017-02-08

DAPL SITREP 149 February 8, 2017 John Porter Chief Security Officer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights #NODAPL Last Stand was initiated on 7 FEB 2017, facilitated by Sacred Stone Camp and Dallas Goldtooth’s Indigenous Environmental Network, with calls for a global #NODAPL action starting 8 FEB 2017. This is significant because of the new focus on widespread messaging, as opposed to asking for protestors to arrive at Standing Rock. Social Media coverage has shifted to petitioning the USACE over the Environmental Impact Statement. SRST legal-council’s inability to sue local LE has had significant presence on Twitter. An expected increase of #NODAPL Social Media coverage will occur over the next 24 hours. Special consideration should be made safeguard any IT and corporate information systems, as a variety of attack vectors are expected to be used by activists, following start of drilling operations. The Details 1. NORTH DAKOTA FUSION CENTER ii. Intel Update Dallas Goldtooth will be filing an injunction with SRST council against the Army Corps of Engineers decision, as well as assisting protestors relocating to the southern camps from Camp 2, following the wishes of SRST. This will assist in the eviction of Camp 2, and the remaining approximately 300 protestors, in moving the forward line of security to the Cannon Ball River. A music festival/rally was held inside Camp 2’s dome, in which drugs and alcohol were openly displayed during live videos. As central control degrades in Camp 2, the likely presence of weapons and homemade incendiary weapons will increase. This illegal activity is facilitated by snowmobiles brining in supplies from Camp 4. iii. Past 24 Hours a. U.S. Army Corp of Engineers announced that they will be granting the easement to drill under Lake Oahe. Protesters immediately issued calls to. b. DAPL security conducted lockdown-drill for both HDD-E and HDD-W, during both day and night shifts. c. 2 protestors from Camp 2 crossed DAPL property lines without being interdicted by LE, staged at OP11. This was followed up by protestors temporarily blocking passage to a property entrance with their vehicle, before departing. TigerSwan Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS iv. Next 24 Hours a. Continue MASINT collection via rotary-wing mounted mobile FLIR. b. Facilitate VIP escort onto DAPL property, and assist federal law enforcement with integration into base defense plan 2. IOWA SECURITY ADVISORY ii. Intel Update “Mississippi Stand” protester was hailed on Social Media for her “heroic efforts” to stop the DAPL pipeline on 08 OCT 2016. This recirculation of information is in response to the USACE’s announcement to approve the easement and forgoing the Environmental Impact Statement. Combined with the protest in Des Moines, this may show renewed interest and a resurging effort to resist the pipeline in Iowa. iii. Past 24 Hours a. Protestors held an anti-Trump/NODAPL protest at Neal Federal Building in Des Moines. b. Met with local LE to further develop relations. c. Protestors began a petition to get the University of Iowa to persuade banks to divest from DAPL, or to divest their own holdings. iv. Next 24 Hours a. Assess the Cambridge Pump Station and valve sites as needed. 3. ILLINOIS FUSION CENTER ii. TigerSwan Intel Update Protestor groups continue to coordinate and schedule joint protests and rallies across Chicago. • answerchicago.org/2017/02/download-leaflets-for-feb-19-protest-tostop-the-trump-agenda/ • answerchicago.org/2017/02/join-mass-street-outreach-to-build-feb-19protest-to-stop-the-trump-agenda/ Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS iii. Past 24 Hours a. Continued assessment and security checks of key infrastructure north of the I-72 corridor. iv. Next 24 Hours a. Due to the scheduled ND protest on February 8th, 2017, TS-IL will travel to Marion County to observer key infrastructure, ensuring oversight if flash protests transpire at the Patoka pump station or pipe yard. Marion County Sheriff’s office is aware of the possibility of protestor activity. TigerSwan Prepared for Energy Transfer Partners 3