"I do not think they applauded or cheered. If its possible to look in the chat history and see who remained muted the entire time that might be of use."

Agreed, good idea.

I updated the vetting script. Collecting names to remove from the 100 list now.

:thumbsup:

@Jason NY Names to remove from the list so far:
Alex PA
Eric PA
Ryan PA
Adam PA
Jason NY
Nick NY
Grant MD
Ben MD
Christopher VA

Will remove from spreadsheet. Not possible to aquire data of who never unmuted their mic -Vincent

Seeking your approval to remove these names from list, also:

Tyler CT
Oscar ID
Daniel TX
Rex VT
William TX
Alan MI
Jesse CO
Jesse AR
James TX

Yes.

:thumbsup:

In the logs you can see who was using a mobile client and who was using windows/Linux.

Another list to reference

We can add that to the data. I think my comment there should be ignored, I quickly realized that only the audio from IGD was recorded from speakers. The IGD editor probably recorded the audio sent by the infil on his phone for some reason, boomer likely.

Full list - 76 names
Short list - 7 names

Ok that’s much better.

James NC has been removed from the org, Ethan OH's account is disabled.

Wilson TX reached out to me asking to aid in our search. Citing he is tech savvy. Not interested in his help. Is he on a list?

I told him he can help by giving me some opposition comms ha

He was in the meeting during the time the audio was recorded but he checks no other boxes.

@Vincent TX I told him to. I don't think he's suited for it now, but keep it on your mind for a month or two down the road if he loses weight and gets a new job. Tell him that you'd want to see more progress from him before he's trusted with a spot on the team.

He lives with Austin, NWQ for 1. Not a security risk unless we need to travel a mile in less than 25 minutes.

If I'm reading these logs correctly, Josh CA was not in the meeting for the full portion of audio that was recorded by antifa before the server restarted.

Looks like he joined, lost connection about a minute later, and then couldn't re-join because server was full.

@Jason NY Notes like that can cross people off the list.

I know but I want Vincent TX to check this before I cross it off because I am stupid sometimes.

I am meeting up with Sam and his guys briefly before I get to PA but tonight I will be able to do more

<br>17:57:37 - Josh CA joins meeting channel<br>17:57:41 - Josh CA loses connection to server<br>17:58:13 - Josh CA joins meeting channel again<br>18:03:57 - Josh CA loses connection to server again<br>18:04:01 - Josh CA tries to join again, fails due to server full<br>18:04:13 - Server restarts<br>

I feel like there would be gaps in the audio that aren't there if it was his recording.

The only people from the short list who didn't disconnect at least once until the exact moment of restart are:

Robert IN
Peter MN
Francis MI

Ethan OH was not in the meeting channel at all prior to restart. He was in lobby, unverified, and tried to move into the channel many times but was denied permission.

So he can get crossed off too.

I still think he's antifa or an FBI agent for connecting on linux/tor combo without ever mentioning tech interest though.

There is at least 5 minutes of interrupted audio prior to the restart that was published by antifa, and the antifa did not disconnect before the restart - he waited for the server to kick him out.

Ethan's not on our list because he's already deactivated.

Names for removal:
Johnny ID
Lawrence FL
David WA
Jesse CO
John WA
Eric PA
Patrick TX
Frederick OR
Walter ID
Ryan PA
Jon UT

@Jason NY @Vincent TX Any progress on looking at the logs or crossing off names?

Yeah. Robert IN, Peter MN and Francis MI are the only people who were A. Connected to the meeting, before the restart, and didn’t disconnect once. And B. Connected while using a VPN.

Josh CA and Jesse GA, I believe the connection logs vindicate them, but I want a second opinion from Vincent when he’s at a hotel.

Ask @ND - Ryan OH , @ND - Johnny MN and @Alan MI for reports on those three, respectively.

Will do

Robert is new, joined on the 15th. Logs in frequently. Has never had any real conversations with me. Not sure where he is in the state or who knows him.

Hopefully Ryan OH can tell me more.

Remove from list according to Johnny:
Johnny MN
Matthew MN
Ray MN
Mike MN
Peter MN
George MN

Please also check last-login date for all of them on the interview server.

Interviewee-785872, Interviewee-7934, Interviewee-219169

Ignore 934

7934*

I would like to review PF-7934's interview notes but I don't know how to translate his user ID to an interviewee number.

Interviewee-219169
Last login
3:43 PM

That's suspicious to me.

Robert is also quite active in logging in on the main.

I would like to review the logs of the interview server to see what exactly he has been up to. Can you give me admin, or create a new user-group with access to Logging, and assign it to me?

I can just log into his account.

Would that accomplish the same thing, Jason?

Some of it but not all. Rocket Chat’s internal logging will show me a bigger picture of what he’s been up to on the server. It shows what channels a user opens, what user profiles a user opens, and whenever a user accesses the online directory.

He should only have two channels, and no ability to send DMs on his own, and no access to any directory I am aware of.

I believe all users can click the "Members" button at the top and view the list of registered users.

Adam IN did his vetting interview. Messaged him.

:thumbsup:

Peter MN:
- 19 years old, lives with parents
- College student
- Does not use drugs or alcohol. Says older sister was a substance abuser.
- Identifies as Third Positionist
- Browses telegram and reads often
- He has read "most known fascist literature such as Mein Kampf and Doctrine of Fascism"

Who is this report from?

Johnny MN

Ask him to dig deeper.

Done.

Francis MI:
- 18 years old.
- FBI visited him over telegram posts prior to joining.
- Tried to join the marines, was denied.
- Has a "spergy" vibe, immature.
- Does not sticker often, cites no car and living in rural area.
- Attends activism whenever someone offers to drive him.
- Cancelled on hike last minute claiming to have gotten covid.
- His behaviour is improving, he attended DC demo, Alan MI is not suspicious of him.

Yeah, Francis seems too wacky to be the culprit.

@Jason NY Have we cross referenced the list with the membership list? Make sure there aren't any extra names there?

I will do that now, hopefully I don't get rate limited.

"Logan NC" is not a currently registered user.

That's strange.

Ask Marcus and Adam if they know one.

It was not a clerical error, just confirmed in logs. Someone called "Logan-NC" did connect.

Will do.

Can you trace the IP? See where it's from.

Yes

Do that.

VPN from Washington state.

I think that speaks for itself.

Okay. But he still knew when to connect.

Yep. And looking at logs it seems like he never actually made it into the meeting, at least not before the server restart.

So he can't be our recorder, but he's definitely someone else. Maybe Vincent still trying to weasel in.

I will continue down the list now

I de-registered the account.

I am rate limited by the server, I can't complete this task. By searching a bunch of names in the registry the server thinks I am trying to spam.

Marcus says Logan went inactive a month ago.

Antifa probably picked a random name from their screenshots of the user list. We're lucky they picked one that was removed, or I wouldn't have spotted that.

Maybe.

The same Washington IP connected a minute later with the name "Logan-UT", was verified and moved in to the meeting room.

Removed from registry.

Time in meeting room matches up with the antifa-released audio.

So it was "Logan", but not Logan.

Yep, antifa stole his name.

So we found our recorder. How do we pair this up in the main server?

I don't really know where to go from here. Surely someone still told antifa the time/date of the meeting.

Was Norman CA at the meeting?

Yes

Could he have been our accomplice who relayed info to Vincent faking as Logan UT? Would that solve the theory?

Yes, actually. Norman CA was at the first mumble meeting that John WA set up. He was at this one too. And he's using a VPN.

Grill Brandon on Norman some more.

On it

Still doesn't solve the NJP angle.

There is practically nobody who attended NJP who isn't high-trust. I'm leaning towards coincidence.

NJP attendance list:

<br>Kyle MO<br>Randolph IL<br>Benjamin MI<br>Johnny MI<br>Bill MA + Wife<br>Henry MA<br>Tyler CT<br>Steven OH<br>Brandon CA<br>Jason NY<br>Samuel VA<br>Grant MD + Wife<br>Tyler MD + Alex UF<br>Ben MD<br>Roger VA<br>John VA<br>Christopher AL<br>Harrison VA<br>Kenneth VA<br>Eric PA<br>John UT<br>Joshua UT<br>Alan UT + JC UF<br>Francis PA<br>John MN<br>Patrick TX

Antifa spots a big group of nationalists at the very popular local beer hall. They follow one vehicle back to the hotel which many of us stayed. They follow the same vehicle to the walmart parking lot, and then to the event space.