TOP SECRET//COMINT//20291123

DNI101 How Do I Begin Analyzing a Target's Email Address?

Targets Email address Consider' (e.g., [email protected]) USSID 18/ Host Country restrictions Query Raw Traffic/Targeting Verify ^ 1

NKB/Foxtrail Í Content J Is Target Tasked? for IPs TAO Collection using using

/ Marina Pinwale Retro Xkeyscore Near-real- Passive Active (>1 Year) Dishflre MecWçb/iMainwi time FAA Collection Collection V - / TrafficThief tipping Lionheart Fusion Maui/Anchory/M3 WWW (clYear) Intelink Google/Yahoo Homebase Online D-bases Pinwale Dissem Proton; Pinwale, N5A Library (standing query) etc. Publications using using using using

using using in search of Traffichisi \ via UTT Names, numbers (CT) TUNINGFORK UIS Pinwale Data Addresses, orgs, titles, URLs, Marina Manager alternate email add's, phone #s countries, nationalities, etc.

Then you view results using IMPORTANT: Understand the different between RESEARCH and TARGETING So you did all that and now UIS/Plnwale DNI Presenter you are finding results? Querying in raw-traffic databases is TARGETING!! (Raw Traffic DBs: Pinwale, Xkeyscore, Marina, Dishfire, TrafficThief) Great! ^-Tool/Database j Now What? Do RESEARCH before TARGETING (Research tQP'S: WWW, Speedbump, =SIGIWT value Foxtrâil, NSIookup, Domain Lookup, Anchory) TOP SECRET//COMINT//20291123

(^Tool/Database^ What Things Are Found Doing DNI Analysis and What Tools Can I Use to Analyze Them?

So you found some things, GREAT! Did you find..,.

More Email Addresses (returns to previous screen) IP Addresses? Cookies? to develop Things you don't understand? help you analyze Network Maps Phone numbers.? (SIGDEV) help you analyze Other email Websites They Use? query accounts on computer? query

References Location using Traffic Routing Best (eg. Newton's information Tech Leads Collection Telecom) Points XKeyscore Pinwale Xkeyscore LionRoar help you analyze DÛPHONE

Mainway document NKB Ownership/ Hosting Info Site content NSLookup Traceroutes Speedbump Dishfire Registration Foxtrail in search of in search of Mastershake Blackpearl/ Marina SIGADS Jacksparrow/ Affiliation CaseNotations Roadbed/ US SID 18 information Other EEIs StoryDuty concerns (Organizations? (emails, Ph #'s, companies?) Names, etc) Domain/Whois Lookups (eg. Central0p5.net) IP Address Blocks (NS Lookups)