Internal TigerSwan Situation Report 2017-02-09

TigerSwan Solutions to DAPL SITREP 150 a February 9, 2017 i? John Porter ENE RGY TRANSFER ChiefSecurityOfficer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights DAPL business operations resumed with the initiation of drilling operations at 1822 CST on 08FEB2017. Almost immediately following, protestor Social Media in vicinity of the camps went silent. There is widespread belief among protestors that LE is monitoring, as well as jamming and collecting cellphone traffic from OP11. Continued fears of raids are diminishing the population of Camp 2, as native personnel are moving to Fort Yates and Mobridge, while non-native personnel head to Bismarck and the Prairie Knights Casino. Continuation of nonviolent direct action efforts is being reconsidered and conflicting leadership rhetoric in camps is causing mounting frustration among protestors. 
 The Details A. NORTH DAKOTA FUSION CENTER ii. Intel Update a. The only Facebook live feeds yesterday were posted at the Prairie Knights casino, urging people to pray for ”, who was arrested by BIA at the casino. b. The start of drilling was a massive blow to the morale of the protestors, with many fleeing to stay at the Prairie Knights Casino, fearing a raid would be launched on Camp 2 and Camp 4 in combination with drilling commencement. c. Shiye Bidzel has asked everyone in Camp to remove themselves from Facebook and to maintain a low digital footprint. This likely stems from the belief that all protestor cell phones are being targeted, and will be used as evidence, for future arrests. Remaining protestors are acutely aware of LE infiltration, and the monitoring of Social Media, seeing themselves as increasingly vulnerable to prosecution. d. Veteran protestors have again called for the use of high powered lasers against aircraft and observation posts, specifically against N16757. The justification being, if a laser is used to injure a pilot, the investigation will reveal illegal flights are being made against protestors. While totally oblivious to the reality of FFA regulations, this does pose a threat to flight crews and security forces. iii. TigerSwan Past 24 Hours a. U.S. Army Corp of Engineers issued the easement needed to drill under Lake Oahe. Protesters used drones to scout the HDD-W drill pad and reveal the commencement of drilling operations via Social Media. Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS b. Five protesters involved in the October 27th, 2016, arson have been charged by Federal Authorities. was arrested by Federal Law Enforcement agents at the Black Knights Casino on 8 FEB 2017 for his part in the arson. The arrest caused an outcry among the remaining protesters in the camps for his release. iv. Next 24 Hours a. Sync LE reporting from LE staging with reporting from HHD observation elements. b. Adjusting C wire on Valve 380 to allow access. Gates are being strengthened on HDD-W.
 c. Southern and eastern flank of HDD-W have been strengthened with additional CWire to provide protection against direct action. 
 B. IOWA SECURITY ADVISORY ii. Intel Update a. “Mississippi Stand” protesters are sharing Seattle’s divestment from Wells Fargo, based on the bank’s business connections with DAPL. This news will likely embolden petition efforts to get the University of Iowa to also divest from banks funding DAPL. b. “Bold Iowa” protesters shared their concerns with the EPA administrator pick, followed by shares of pipeline leaks. These posts were intended to generate additional support following the relatively poor turnout of the Federal building protest. iii. Past 24 Hours a. Observed protesters at Neal Federal Building in Des Moines. Following the demonstration, protesters entered the federal building to talk to Iowa state Senators and plead their case. Protesters were met by representatives from the Senators’ offices, who took notes of the Protesters’ complaints. iv. Next 24 Hours a. Assess the Cambridge Pump Station and valve sites as needed. TigerSwan Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS C. ILLINOIS FUSION CENTER ii. Intel Update a. Four DAPL protestors were arrested, at a Citi Bank branch in Chicago, after chaining themselves together on Wednesday. • www.chicagotribune.com/news/local/breaking/ct-dakota-pipelineprotest-arrests-20170208-story.html iii. Past 24 Hours a. Liaised with Marion County Sheriff’s office and Leighton security. Conducted security inspections at the Patoka pump station and pipe yard. Inspected vital areas of the ROW IVO various valve sites. iv. Next 24 Hours a. Continue open-source collection. TigerSwan Prepared for Energy Transfer Partners 3