forked from albancrommer/nsa-observer
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathprograms.wiki
6773 lines (6314 loc) · 311 KB
/
programs.wiki
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
=== ALPHA ===
""Alias"" : [[GCHQ]]
""Tags"" :
""Short Description"" : Exchange designator for UK's Government Communications Headquarters ([[GCHQ]]). Used during sharing of intercepted civilian communications.
""Category"" : five eyes
""Family"" : agence
""Related items"" : [[ECHO]] [[INDIA]] [[OSCAR]] [[UNIFORM]]
""Related items (parents)""
""Related items (children)""
""Compartments"" :
""Status"" : active
""Agency"" : GCHQ
""Links"" :
* [http://www.intrepidreport.com/archives/8588|intrepidreport.com - Senate delivers fatal end-of-term blow to Constitution]
=== AGILEVIEW ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)""
""Compartments"" :
""Status"" : unknown
""Agency"" :
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm|cryptome.org - NSA X-Keyscore Member of Cyberespionage Family]
=== AGILITY ===
""Alias"" :
""Tags"" :
""Short Description"" : stores intercepted voice communications
""Category"" : program
""Family"" : database
""Related items"" : [[OCEANARIUM]] [[PINWALE]] [[NUCLEON]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.intrepidreport.com/archives/8588|intrepidreport.com - Senate delivers fatal end-of-term blow to Constitution]
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm|cryptome.org - NSA X-Keyscore Member of Cyberespionage Family]
=== AIGHANDLER ===
""Alias"" :
""Tags"" : [[geolocation]]
""Short Description"" : Geolocation analysis
""Category"" : program
""Family"" : process
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm|cryptome.org - NSA X-Keyscore Member of Cyberespionage Family]
=== AIRGAP/COZEN ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm|cryptome.org - NSA X-Keyscore Member of Cyberespionage Family]
=== ALTEREGOQFD ===
""Alias"" :
""Tags"" :
""Short Description"" : A “Question filled Dataset”
""Category"" :
""Family"" : Database
""Related items"" : [[QUANTUM]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== AMBULANT ===
""Alias"" :
""Tags"" :
""Short Description"" : An undetermined, highly confidential compartiment mentioned in the [[BULLRUN]] documents.
""Category"" : compartiment
""Family"" : [[ECI]]
""Related items"" : [[BULLRUN]]
""Related items (parents)"" : [[BULLRUN]]
""Related items (children)"" :
""Compartments"" : [[ECI]] [[TOP SECRET]] [[SI]] [[REL TO USA]] [[FVEY]]
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/09/nsa-bullrun-2-16-guardian-13-0905.pdf|cryptome.org/guardian - PROJECT BULLRUN ]
=== ANCHORY ===
""Alias"" :
""Tags"" :
""Short Description"" : NSA software system which provides web access to textual intelligence documents / Main repository of finished NSA SIGINT reports going back three years.
""Category"" : program
""Family"" : database
""Related items"" : [[MAUI]] [[OCEANARIUM]]
""Related items (parents)"" : [[MAUI]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://muckrock.s3.amazonaws.com/foia_files/7-17-13_MR6022RES.pdf| www.muckrock.com -7-17-13_MR6022RES.pdf]
* [http://www.theatlantic.com/technology/archive/2013/08/an-educated-guess-about-how-the-nsa-is-structured/278697/|theatlantic.com - An Educated Guess About How the NSA Is Structured]
* [http://www.intrepidreport.com/archives/8588|intrepidreport.com - Senate delivers fatal end-of-term blow to Constitution]
* [https://www.documentcloud.org/documents/740163-anchory.html#document/p1 - Freedom of information act case # 41989]
=== ANGRYNEIGHBOR ===
""Alias"" :
""Tags"" :
""Short Description"" : A family of bugs implemented as RF retro reflectors. These communicate with the use of an external radar wave generator such as [[CTX4000]] or [[PHOTOANGLO]]. The signals are then processed by a system such as [[VIEWPLATE]], (for the [[VAGRANT]] video signal). Known implementations: ||LOUDAUTO]] (ambient audio). ||DROPMIRE]] (printer/fax), [[RAGEMASTER]] (video), [[SURLYSPAWN]] (keyboard/mouse).
""Category"" : attack vector
""Family"" : hardware
""Related items"" : [[CW]] [[SURLYSPAWN]] [[RAGEMASTER]] [[DROPMIRE]] [[LOUDAUTO]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" : [[CTX4000]] [[CW]] [[LOUDAUTO]] [[PHOTOANGLO]] [[SURLYSPAWN]] [[TAWDRYYARD]] [[NIGHTWATCH]] [[VIEWPLATE]]
""Compartments"" :
""Status"" : active
""Agency"" : NSA
""Links"" :
* [http://www.spiegel.de/international/world/the-nsa-uses-powerful-toolbox-in-effort-to-spy-on-global-networks-a-940969-2.html|spiegel.de - Inside TAO: Documents Reveal Top NSA Hacking Unit]
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== ANTOLPPROTOSSGUI ===
""Alias"" : [[ANTO LP PROTOSS GUI]]
""Tags"" :
""Short Description"" : ANTO LP PROTOSS GUI was spotted on [[IRONCHEF]] diagram.
""Category"" :
""Family"" :
""Related items"" : [[PROTOSS]] [[ANTO]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== APERIODIC ===
""Alias"" :
""Tags"" :
""Short Description"" : An undetermined, highly confidential compartiment mentioned in the [[BULLRUN]] documents.
""Category"" : compartiment
""Family"" : [[ECI]]
""Related items"" : [[BULLRUN]]
""Related items (parents)"" : [[BULLRUN]]
""Related items (children)"" :
""Compartments"" : [[ECI]] [[TOP SECRET]] [[SI]] [[REL TO USA]] [[FVEY]]
""Status"" : unknown
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/09/nsa-bullrun-2-16-guardian-13-0905.pdf|cryptome.org/guardian]
=== AQUADOR ===
""Alias"" :
""Tags"" :
""Short Description"" : Merchant ship tracking tool
""Category"" : program
""Family"" : process
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" : unknown
""Agency"" : NSA
""Links"" :
* [http://www.theatlantic.com/technology/archive/2013/08/an-educated-guess-about-how-the-nsa-is-structured/278697/|theatlantic.com - An Educated Guess About How the NSA Is Structured]
=== ARCA ===
""Alias"" :
""Tags"" :
""Short Description"" : SIGINT Exchange Designators with Third or Fourth Parties.
""Category"" : program
""Family"" : compartment
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.intrepidreport.com/archives/8588|intrepidreport.com - Senate delivers fatal end-of-term blow to Constitution]
=== ARKSTREAM ===
""Alias"" :
""Tags"" : [[bios]]
""Short Description"" :malicious BIOS flashing program, known to be associated with [[DEITYBOUNCE]] and [[SWAP]].
""Category"" : attack vector
""Family"" : hardware
""Related items"" : [[DEITYBOUNCE]] [[SWAP]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== ARTEMIS ===
""Alias"" :
""Tags"" :
""Short Description"" : An undetermined program for Geospatial analysis
""Category"" : program
""Family"" : process
""Related items"" : [[ENTOURAGE]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== ARTIFICE ===
""Alias"" :
""Tags"" :
""Short Description"" : A [[SIGAD]] (SIGINT Activity Designator) known as [[STORMBREW]], for example, relies on two unnamed corporate partners described only as [[ARTIFICE]] and [[WOLFPOINT]]. According to an NSA site inventory, the companies administer the NSA’s “physical systems,” or interception equipment, and “NSA asks nicely for tasking/updates.”
""Category"" : program
""Family"" : collect
""Related items"" : [[WOLFPOINT]] [[STORMBREW]]
""Related items (parents)"" : [[STORMBREW]]
""Related items (children)"" :
""Compartments"" : [[TOP SECRET]] [[COMINT]] [[NOFORN]]
""Status"" : active
""Agency"" : NSA
""Links"" :
* [http://www.washingtonpost.com/world/national-security/nsa-tracking-cellphone-locations-worldwide-snowden-documents-show/2013/12/04/5492873a-5cf2-11e3-bc56-c6ca94801fac_story.html|washingtonpost.com - NSA tracking cellphone locations worldwide, Snowden documents show]
* [https://en.wikipedia.org/wiki/STORMBREW| en.wikipedia.org - STORMBREW]
* [http://electrospaces.blogspot.fr/2014/01/slides-about-nsas-upstream-collection.html|electrospaces.blogspot.fr - Slides about NSA's Upstream collection]
* [https://www.documentcloud.org/documents/813849-sso2.html#document/p1| www.documentcloud.org - FAA reports by provider]
=== ASSOCIATION ===
""Alias"" :
""Tags"" :
""Short Description"" : Tactical SIGINT social network database
""Category"" : Program
""Family"" : Database
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theatlantic.com/technology/archive/2013/08/an-educated-guess-about-how-the-nsa-is-structured/278697/|theatlantic.com - An Educated Guess About How the NSA Is Structured]
=== AUNTIE ===
""Alias"" :
""Tags"" :
""Short Description"" : An undetermined, highly confidential compartiment mentioned in the [[BULLRUN]] documents.
""Category"" : compartiment
""Family"" :
""Related items"" : [[BULLRUN]]
""Related items (parents)"" : [[BULLRUN]]
""Related items (children)"" :
""Compartments"" : [[ECI]] [[TOP SECRET]] [[SI]] [[REL TO USA]] [[FVEY]]
""Status"" : unknown
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/09/nsa-bullrun-2-16-guardian-13-0905.pdf|cryptome.org/guardian - nsa-bullrun-2-16-guardian-13-0905.pdf]
=== AUTOSOURCE ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm|cryptome.org -NSA X-Keyscore Member of Cyberespionage Family]
=== BACONRIDGE ===
""Alias"" :
""Tags"" :
""Short Description"" : Installation of [[TAO]] in St. Antonio, TX. 270 personnel, 210 workstations.
""Category"" : compartment
""Family"" : [[ECI]]
""Related items"" : [[TAO]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.spiegel.de/fotostrecke/nsa-dokumente-die-abteilung-tao-der-nsa-fotostrecke-105355-14.html|Der Spiegel - Geheimdokumente: Die Spezialabteilung [[TAO]] der NSA stellt sich vor]
* [http://www.spiegel.de/international/world/the-nsa-uses-powerful-toolbox-in-effort-to-spy-on-global-networks-a-940969.html|Der Spiegel - Inside TAO: Documents Reveal Top NSA Hacking Unit]
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== BANANAGLEE ===
""Alias"" :
""Tags"" : [[cisco]] [[router]] [[juniper]]
""Short Description"" : A software exploit made by Digital Network Technologies ([[DNT]]) for Juniper Netscreen ns5xt, ns50, ns200, ns500, ISG 1000, ssg140, ssg5, ssg20, SSG 320M, SSG 350M, SSG 520, SSG 550, SSG 520M, SSG 550M firewalls. Also works on Cisco PIX 500 series and ASA 5505, 5510, 5520, 5540, and 5550 series firewalls. Used for exfiltrating data from target networks.
""Category"" : attack vector
""Family"" : software
""Related items"" : [[TAO]] [[JETPLOW]] [[SOUFFLETROUGH]] [[FEEDTROUGH]] [[GOURMETTROUGH]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== BANYAN ===
""Alias"" :
""Tags"" :
""Short Description"" : NSA tactical geospatial correlation database
""Category"" : program
""Family"" : database
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theatlantic.com/technology/archive/2013/08/an-educated-guess-about-how-the-nsa-is-structured/278697/|theatlantic.com - An Educated Guess About How the NSA Is Structured]
=== BEACHHEAD ===
""Alias"" :
""Tags"" :
""Short Description"" :Computer exploit delivered by the [[FERRETCANNON]] system.
""Category"" : attack vector
""Family"" : network
""Related items"" : [[FERRETCANNON]] [[FOXACID]]
""Related items (parents)"" : [[FERRETCANNON]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://www.schneier.com/blog/archives/2013/10/the_nsas_new_ri.html|schneier.com - The NSA's New Risk Analysis]
=== BELLTOPPER ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" : program
""Family"" : database
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://muckrock.s3.amazonaws.com/foia_files/7-17-13_MR6022RES.pdf|muckrock.com - 7-17-13_MR6022RES.pdf]
=== BINOCULAR ===
""Alias"" :
""Tags"" :
""Short Description"" : BINOCULAR is an integrated NSA signals intelligence source data broadcast service system, integrating nine separate Ultra High Frequency (UHF) transmissions, transmitted through the Global Broadcast System satellite network.
""Category"" : program
""Family"" : process
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://www.fas.org/irp/program/disseminate/binocular.htm|fas.org - BINOCULAR ]
=== BLACKFOOT ===
""Alias"" :
""Tags"" :
""Short Description"" : Name of an operation to bug the french ambassy in Washington, introducing spywares in foreign embassies.
""Category"" : attack vector
""Family"" : hardware
""Related items"" :
""Related items (parents)"" : [[GENIE]]
""Related items (children)"" : [[HIGHLANDS]][[VAGRANT]]
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theguardian.com/world/2013/jun/30/nsa-leaks-us-bugging-european-allies|theguardian.com - New NSA leaks show how US is bugging its European allies]
* [http://www.bbc.co.uk/news/world-europe-24628947| http://www.bbc.co.uk - US National Security Agency 'spied on French diplomats]
* [https://www.documentcloud.org/documents/807030-ambassade.html#document/p1|docs by lemonde.fr]
=== BLACKHEART ===
""Alias"" :
""Tags"" :
""Short Description"" : collection from FBI implant.
""Category"" : program
""Family"" : collect
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Agency"" : NSA
""Links"" :
* [https://www.documentcloud.org/documents/807030-ambassade.html#document/p1|docs by lemonde.fr]
* [https://www.schneier.com/blog/archives/2013/10/code_names_for.html|www.schneier.com - Code Names for NSA Exploit Tools]
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== BLACKMAGIC ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
=== BLACKPEARL ===
""Alias"" :
""Tags"" : [[dni]] [[gsm]] [[crypto]]
""Short Description"" : mentioned in context of Petrobras story
""Category"" : Program
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
* [https://secure.huffingtonpost.com/zachary-graves/the-nsas-war-against-encr_b_3901328.html| secure.huffingtonpost.com]
=== BLARNEY ===
""Alias"" :
""Tags"" :
""Short Description"" : BLARNEY is a communications surveillance program, started in 1978 and operated under FISA. The collection takes place at top-level telecommunications facilities within the United States, choke points through which most traffic will flow, including wireless. This type of surveillance is referred to as "[[UPSTREAM]] collection". Among the facilities associated with BLARNEY are AT&T's Room 641A in San Francisco, California, revealed in 2006 by Mark Klein, and another in New Jersey. Like its counterparts, BLARNEY was expanded after the September 11 attacks. Information collected from BLARNEY is shared with many agencies in the United States, including the CIA, NSA, FBI and DOJ, it is also shared with the Five Eyes and NATO. A number of private companies also have access.
""Category"" : program
""Family"" : collect
""Related items"" : [[UPSTREAM]]
""Related items (parents)"" : [[UPSTREAM]]
""Related items (children)"" :
""Compartments"" : [[FISA]] [[TOP SECRET]] [[COMINT]] [[NOFORN]] [[FOUO]]
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://en.wikipedia.org/wiki/Blarney_%28code_name%29|en.wikipedia.org - Blarney]
* [http://online.wsj.com/article/SB10001424127887324108204579022874091732470.html|wsj.com - New Details Show Broader NSA Surveillance Reach]
* [http://cryptome.org/2013/12/nsa-cable-spy-types.pdf||SSO - The cryptologic provider of Intelligence from Global High-Capacity Telecommunications Systems]
=== BLINDDATE ===
""Alias"" :
""Tags"" :
""Short Description"" : Software included on [[SPARROW-II]] mini computers. Also seen in another context on [[QFIRE]] slide as part of a “[[TAO]] covert network.”.
""Category"" : attack vector
""Family"" : hardware
""Related items"" : [[STRAITBIZARRE]] [[QUANTUM]] [[SPARROW-II]] [[QFIRE]] [[TAO]]
""Related items (parents)"" : [[SPARROW-II]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== BLUEANCHOR ===
""Alias"" :
""Tags"" :
""Short Description"" : Partner providing a network access point for the [[YACHTSHOP]] program.
""Category"" : program
""Family"" : collect
""Related items"" : [[YACHTSHOP]] [[UPSTREAM]]
""Related items (parents)"" : [[YACHTSHOP]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://en.wikipedia.org/wiki/OAKSTAR|en.wikipedia.org - OAKSTAR]
=== BLUEZEPHYR ===
""Alias"" : [[US-3277]]
""Tags"" :
""Short Description"" : subprogram of [[OAKSTAR]].
""Category"" : program
""Family"" : collect
""Related items"" : [[OAKSTAR]] [[UPSTREAM]]
""Related items (parents)"" : [[OAKSTAR]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://en.wikipedia.org/wiki/OAKSTAR| en.wikipedia.org - OAKSTAR]
=== BOUNDLESSINFORMANT ===
""Alias"" :
""Tags"" : [[dni]] [[dnr]] [[phone]]
""Short Description"" : BOUNDLESSINFORMANT is a big data analysis and data visualization system used by the NSA to give managers summaries of the NSA's world wide data collection activities. According to a Top Secret heat map display also published by The Guardian and produced by the Boundless Informant program, almost 3 billion data elements from inside the United States were captured by the NSA over a 30-day period ending in March 2013.Data analyzed by BOUNDLESSINFORMANT includes electronic surveillance program records ([[DNI]]) and telephone call metadata records ([[DNR]]) stored in an NSA data archive called [[GM-PLACE]]. It does not include FISA data, according to the FAQ memo. [[PRISM]] (US-984XN), which was revealed at the same time as BOUNDLESSINFORMANT, is one source of DNR data. According to the map, BOUNDLESSINFORMANT summarizes data records from 504 separate DNR and DNI collection sources (SIGADs). In the map, countries that are under surveillance are assigned a color from green, representing least coverage to red, most intensive.
""Category"" : program
""Family"" : process
""Related items"" : [[PRISM]] [[FASCIA]]
""Related items (parents)"" : [[PRISM]]
""Related items (children)"" : [[FASCIA]]
""Compartments"" : [[TOP SECRET]] [SI]] [[NOFORN]] [[FOUO]] [[FISA]]
""Status"" : active
""Agency"" : NSA
""Links"" :
* [https://en.wikipedia.org/wiki/Boundless_Informant|en.wikipedia.org - Boundless Informant]
* [http://www.theguardian.com/world/2013/jun/08/nsa-boundless-informant-global-datamining|The Guardian - Boundless Informant: the NSA's secret tool to track global surveillance data]
=== BRUNEAU ===
""Alias"" :
""Tags"" :
""Short Description"" : Name of an operation to bug the italian UN mission, introducing spywares in foreign embassies.
""Category"" : attack vector
""Family"" : hardware
""Related items"" :
""Related items (parents)"" : [[GENIE]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theguardian.com/world/2013/jun/30/nsa-leaks-us-bugging-european-allies|TheGuardian - New NSA leaks show how US is bugging its European allies]
=== BSR ===
""Alias"" :
""Tags"" : [[gsm]] [[phone]]
""Short Description"" : Base Station Router, use for intercepting GSM cell phone signals. Ships with laptop and accessories, networkable with other units via 802.11. Supports [[CANDYGRAM]] and [[LANDSHARK]] capabilities.
""Category"" : program
""Family"" : collect
""Related items"" : [[CANDYGRAM]] [[LANDSHARK]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/12/nsa-catalog-appelbaum.pdf|cryptome.org - NSA's catalog]
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== BULLDOZER ===
""Alias"" :
""Tags"" : [[pci]]
""Short Description"" : PCI bus malicious hardware, installed via [[INTERDICTION]], possibly connected to a Wi-Fi card or a subverted router.
""Category"" : attack vector
""Family"" : hardware
""Related items"" :
""Related items (parents)"" : [[INTERDICTION]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
* [http://media.ccc.de/browse/congress/2013/30C3_-_5713_-_en_-_saal_2_-_201312301130_-_to_protect_and_infect_part_2_-_jacob.html| media.ccc.de - To Protect And Infect Part 2 The militarization of the Internet by Jacob Appelbaum.]
* [[http://www.theregister.co.uk/2013/12/31/nsa_weapons_catalogue_promises_pwnage_at_the_speed_of_light/?page=2|TheRegistry]
=== BULLRUN ===
""Alias"" :
""Tags"" :
""Short Description"" : BULLRUN is a clandestine, highly classified decryption program run by the NSA. The British signals intelligence agency Government Communications Headquarters (GCHQ) has a similar program codenamed [[EDGEHILL]]. Access to the program is limited to a group of top personnel at the Five Eyes (FVEY), NSA and the signals intelligence agencies of Britain, Canada, Australia, and New Zealand. Signals that cannot be decrypted with current technology may be retained indefinitely while the agencies continue to attempt to decrypt them: "Documents show that the N.S.A. has been waging a war against encryption using a battery of methods that include working with industry to weaken encryption standards, making design changes to cryptographic software, and pushing international encryption standards it knows it can break." (The New York Times)
""Category"" : program
""Family"" : process
""Related items"" : [[APERIODIC]] [[AMBULANT]] [[AUNTIE]] [[PAINTEDEAGLE]] [[PAWLEYS]] [[PITCHFORD]] [[PENDLETON]] [[PICARESQUE]] [[PIEDMONT]]
""Related items (parents)"" : [[NSA]]
""Related items (children)"" : [[APERIODIC]] [[AMBULANT]] [[AUNTIE]] [[PAINTEDEAGLE]] [[PAWLEYS]] [[PITCHFORD]] [[PENDLETON]] [[PICARESQUE]] [[PIEDMONT]]
""Compartments"" : [[TOP SECRET]] [[SI]] [[REL TO USA]] [[FVEY]]
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/09/nsa-bullrun-brief-propublica-13-0905.pdf|cryptome.org - BULLRUN's briefing sheet]
* [https://en.wikipedia.org/wiki/Bullrun_%28decryption_program%29|en.wikipedia.org - Bullrun (decryption program)]
* [http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html?_r=0|New York Times: Secret Documents Reveal N.S.A. Campaign Against Encryption]
* [http://www.theguardian.com/world/interactive/2013/sep/05/nsa-project-bullrun-classification-guide|The Guardian : Project Bullrun – classification guide to the NSA's decryption program]
* [http://cryptome.org/2013/09/nsa-bullrun-2-16-guardian-13-0905.pdf|cryptome.org - guardian]
=== BULLSEYE ===
""Alias"" :
""Tags"" :
""Short Description"" : "The Naval Security Group worldwide CLASSIC BULLSEYE (now [[FLAGHOIST]]) network is part of the DOD Worldwide High Frequency Direction Finding System for strategic intelligence collection and emitter location. High-Frequency Direction-Finding intercepts and locates voice and message traffic transmitted on short-wave channels."
""Category"" : program
""Family"" : collect
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" : unknown
""Agency"" : NSA
""Links"" :
* [http://www.fas.org/irp/program/collect/classic_bullseye.htm | fas.org - AN/FRD-10 CLASSIC BULLSEYE]
=== BYZANTINEANCHOR ===
""Alias"" :[[BA]]
""Tags"" :
""Short Description"" : BA, a subset of [[BYZANTINEHADES]], refers to a group of associated computer network intrusions with an apparent nexus to China.je n (Source : Cablegate)
""Category"" : program
""Family"" :
""Related items"" : [[BYZANTINECANDOR]]
""Related items (parents)"" : [[BYZANTINEHADES]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm| cryptome.org - NSA codenames]
=== BYZANTINECANDOR ===
""Alias"" : [[BC]] [[email]]
""Tags"" :
""Short Description"" : Refers to a certain class of hacking by Chinese actors. BYZANTINECANDOR is a subset of [[BYZANTINEHADES]] relating to intrusion, including by means of social engineering involving delivering malicious payloads by email. (Source : Cablegate)
""Category"" : attack vector
""Family"" : attack
""Related items"" : [[BYZANTINEHADES]] [[BYZANTINEANCHOR]]
""Related items (parents)"" : [[BYZANTINEHADES]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm| cryptome.org - NSA codenames]
* [http://www.theguardian.com/world/2010/dec/04/wikileaks-cables-china-cyber-warfare | theguardian.com - WikiLeaks cables reveal fears over Chinese cyber warfare]
=== BYZANTINEHADES ===
""Alias"" : [[BH]]
""Tags"" :
""Short Description"" : “a cover term for a series of related computer network intrusions with a believed nexus to China, has affected U.S. and foreign governments as well as cleared defense contractors since at least 2003” Believed to be Chinese state-sponsored (the PLA in particular). Though the evidence is tenuous. (ca 2009). In general, victims of Chinese-affiliated hacking are legitimate businesses, including defense contractors. They have been successful in exfiltrating large volumes of confidential emails and other sensitive documents. (Source : Cablegate)
""Category"" : program
""Family"" : collect
""Related items"" : [[BYZANTINECANDOR]]
""Related items (parents)"" :
""Related items (children)"" : [[BYZANTINEANCHOR]] [[BYZANTINECANDOR]]
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm| cryptome.org - NSA codenames]
=== CADENCE ===
""Alias"" :
""Tags"" :
""Short Description"" : Collection mission system for tasking
""Category"" : program
""Family"" : collect
""Related items"" : [[PRISM]] [[GAMUT]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
[http://anthonymesojednik.wordpress.com/tag/nsa/ | anthonymesojednik.wordpress.com - Edward Snowden |
=== CANDYGRAM ===
""Alias"" :
""Tags"" : [[gsm]][[sms]][[windows]] [[os]] [[phone]]
""Short Description"" : Mimics GSM cell tower. Also included in the package are a Windows XP laptop, and cell phone, that communicate with the unit via SMS messages. Capable of targeting 200 phone numbers simultaneously.
GSM telephone trapwire
""Category"" : software
""Family"" : collect
""Related items"" : [[DRTBOX]] [[STINGRAY]] [[BSR] [[NEBULA]] [[CYCLONE]] [[TYPHON]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
* [http://www.digitaltrends.com/web/nsa-malware-code-names/#/2| digitaltrends.com - TURBOPANDA, RAGEMASTER, and 13 other NSA codenames that prove spies laugh, too ]
* [http://securityledger.com/wp-content/uploads/2013/12/nsa-ant-candygram.jpg | securityledger.com - nsa-ant-candygram.jpg ]
=== CANNONLIGHT ===
""Alias"" :
""Tags"" :
""Short Description"" : US Army Counter Intelligence Database
""Category"" : Program
""Family"" : Database
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : USArmy
""Links"" :
* [http://books.google.fr/books?id=SPcHq8wftrsC&pg=SA5-PA12&dq=%22CANNON+LIGHT%22+us+army&hl=en&sa=X&ei=VF3xUpmCEMmg0QXD14HQBA&redir_esc=y#v=onepage&q=%22CANNON%20LIGHT%22%20us%20army&f=false|books.google.fr - "CANNON LIGHT" us army]
=== CARBOY ===
""Alias"" :
""Tags"" : [[phone]]
""Short Description"" : [[SIGINT]] ([[FORNSAT]]) for locating cellphone in Bude (UK)
""Category"" : program
""Family"" : collect
""Related items"" : [[JACKKNIFE]] [[TIMBERLINE]] [[CORALINE]] [[SCS]] [[MOONPENNY]] [[GARLICK]] [[LADYLOVE]] [[SOUNDER]] [[LEMONWOOD]] [[SHOALBAY]] [[SNICK]] [[STELLAR]] [[SCALPEL]] [[IRONSAND]]
""Related items (parents)"" : [[PRISM]]
""Related items (children)"" :
""Compartments"" : [[TOP SECRET]] [[SI]] [[REL TO USA]] [[REL TO AUS]] [[REL TO CAN]] [[REL TO GBR]] [[REL TO NZL]] [[FVEY]]
""Status"" : active
""Agency"" : NSA
""Links"" :
* [http://nsa.gov1.info/dni/ | nsa.gov1.info/dni/]
=== CASPORT ===
""Alias"" :
""Tags"" :
""Short Description"" : access identification tool used to control product dissemination
""Category"" : program
""Family"" : process
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* http://csrc.nist.gov/projects/abac/july2013_workshop/july2013_abac_workshop_minutes.pdf.
=== CAPTIVATEDAUDIENCE ===
""Alias"" :
""Tags"" :
""Short Description"" : used to take over a targeted computer’s microphone and record conversations taking place near the device. The NSA has a diverse arsenal of malware tools, each highly sophisticated and customizable for different purposes. One implant, codenamed UNITEDRAKE, can be used with a variety of “plug-ins” that enable the agency to gain total control of an infected computer. An implant plug-in named CAPTIVATEDAUDIENCE, for example, is used to take over a targeted computer’s microphone and record conversations taking place near the device
""Category"" : program
""Family"" : collect
""Agency"" : [[NSA]]
""Compartments"" :
""Related items"" : [[UNITEDRAKE]]
""Related items (Parents)"" : [[UNITEDRAKE]]
""Related items (Children)"" :
""Status"" : unknown
""Links"" :
* [https://firstlook.org/theintercept/article/2014/03/12/nsa-plans-infect-millions-computers-malware/ | How the NSA Plans to Infect ‘Millions’ of Computers with Malware - theguardian.com]
=== CCDP ===
""Alias"" :
""Tags"" : [[facebook]] [[twitter]] [[email]] [[phone]]
""Short Description"" : [[GCHQ]] Communications Capabilities Development Program. Formerly known as Interception Modernisation Programme (IMP). initiative to create a ubiquitous mass surveillance scheme for the United Kingdom. It would involve the logging of every telephone call, email and text message between every inhabitant of the UK and communications within social networking platforms such as Twitter and Facebook.
""Category"" : program
""Family"" : collect
""Related items"" : [[IMP]] [[TEMPORA]] [[MTI]] [[GTE]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" : unknown
""Agency"" : GCHQ
""Links"" :
* [https://en.wikipedia.org/wiki/Communications_Capabilities_Development_Programme|Wikipedia - Communications Capabilities Development Programme]
* [http://www.telegraph.co.uk/technology/internet/9090617/Phone-and-email-records-to-be-stored-in-new-spy-plan.html|The Telegraph - Phone and email records to be stored in new spy plan]
=== CDRDIODE ===
""Alias"" : [[CDR Diode]]
""Tags"" :
""Short Description"" : It is the name for a protecting device that enables the intercepted data to flow to NSA without enabling an attacker to use the same way to compromise NSA or travel further toward identification. The tentative explanation is that when some data come from the low side (insecure) toward the high side (secure) of the NSA infrastructure so that it can be read by analaysts at the NSA Remote Operation Center ([[ROC]]), then it needs to go through that CDRDIODE.
""Category"" : program
""Family"" : process
""Related items"" : [[IRATEMONK]] [[WISTFULTOLL]] [[STRAITBIZARRE]] [[SEAGULLFARO]] [[UNITEDRAKE]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
* [https://www.youtube.com/watch?v=R8QFPf2RMCQ|LeakSourceNews - Jacob Appelbaum: NSA's FoxAcid/Quantum Programs at the european parliament - 10/15/2013]
=== CHALKFUN ===
""Alias"" :
""Tags"" :
""Short Description"" : Analytic tool, used to search the [[FASCIA]] database
""Category"" : program
""Family"" : process
""Related items"" : [[FASCIA]]
""Related items (parents)"" : [[FASCIA]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.washingtonpost.com/world/national-security/nsa-tracking-cellphone-locations-worldwide-snowden-documents-show/2013/12/04/5492873a-5cf2-11e3-bc56-c6ca94801fac_story.html|washingtonpost.com- NSA tracking cellphone locations worldwide, Snowden documents show]
* [http://www.wikileaks-forum.com/nsa/332/snowden-leak-chalkfun-fascia-and-nsa-targeted-device-location-verification/25826/|wikileaks-forum.com - CHALKFUN and FASCIA Documents- Snowden Leak: CHALKFUN - FASCIA and NSA Targeted Device Location Verification]
* [http://apps.washingtonpost.com/g/page/national/nsa-report-on-privacy-violations-in-the-first-quarter-of-2012/395/|apps.washingtonpost.com - NSA report on privacy violations in the first quarter of 2012]
=== CHASEFALCON ===
""Alias"" :
""Tags"" :
""Short Description"" : Major program of the Global Access Operations (GAO)
""Category"" : Program
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.linkedin.com/in/mastersontech | linkedin.com - John Masterson, CDR, CSSRSr. DoD/Intel Recruiter at Independent Contractor ]
* http://www.linkedin.com/pub/anita-brooker/10/90a/32b | linkedin.com - Anita BrookerSr. Technical Recruiter at ADB & Associates LLC ]
=== CHEWSTICK ===
""Alias"" : [[NORMALRUN]] [[FALLENORACLE]]
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm | cryptome.org - NSA X-Keyscore Member of Cyberespionage Family]
=== CHIMNEYPOOL ===
""Alias"" :
""Tags"" : [[malware]]
""Short Description"" : Software based malware toolkit “Framework”, likely written in C/C++ (according to resumes posted online)
""Category"" : attack vector
""Family"" : software
""Related items"" : [[COTTONMOUTH-I]] [[COTTONMOUTH-II]] [[COTTONMOUTH-II]] [[DROPOUTJEEP]]
""Related items (parents)"" : [[TAO]]
""Related items (children)"" : [[COTTONMOUTH-I]] [[COTTONMOUTH-II]] [[COTTONMOUTH-II]] [[DROPOUTJEEP]]
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
* [http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/Handy/S3222_DROPOUTJEEP.jpg| spiegel - Slide on DROPOUTJEEP]
=== CHIPPEWA ===
""Alias"" :
""Tags"" :
""Short Description"" : CHIPPEWA seems to be a communication network
""Category"" : program
""Family"" : Process
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theguardian.com/world/interactive/2013/sep/11/nsa-israel-intelligence-memorandum-understanding-document| theguardian.com - NSA and Israeli intelligence: memorandum of understanding – full document]
=== CIMBRI ===
""Alias"" :
""Tags"" : [[metadata]]
""Short Description"" : CIMBRI seems to be a metadata database
""Category"" : program
""Family"" : Database
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://electrospaces.blogspot.fr/2013/09/an-nsa-eavesdropping-case-study.html|electrospaces - An NSA eavesdropping case study ]
=== CINEPLEX ===
""Alias"" :
""Tags"" :
""Short Description"" :
""Category"" :
""Family"" :
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2013/08/nsa-x-keyscore-family.htm | NSA X-Keyscore Member of Cyberespionage Family]
=== COASTLINE ===
""Alias"" :
""Tags"" :
""Short Description"" : reporting tool to receive and report on near real-time intelligence for forward deployed troops
""Category"" : program
""Family"" : Collect
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [ http://www.scmagazineuk.com/watching-the-watchmen/article/306005/| www.scmagazineuk.com - Watching the Watchmen ]
=== COBALTFALCON ===
""Alias"" :
""Tags"" :
""Short Description"" : [[US-3354]], Subprogram of [[OAKSTAR]].
""Category"" : program
""Family"" : collect
""Related items"" : [[OAKSTAR]] [[UPSTREAM]]
""Related items (parents)"" : [[OAKSTAR]]
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [https://en.wikipedia.org/wiki/OAKSTAR| en.wikipedia.org - OAKSTAR]
* [http://electrospaces.blogspot.fr/2014/01/slides-about-nsas-upstream-collection.html|electrospaces.blogspot.fr - UPSTREAM collection]
=== COMMONDEER ===
""Alias"" :
""Tags"" : [[malware]]
""Short Description"" : A software based malware, used by the NSA.
""Category"" : attack vector
""Family"" : software
""Related items"" : [[SEASONEDMOTH]] [[VALIDATOR]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://media.ccc.de/browse/congress/2013/30C3_-_5713_-_en_-_saal_2_-_201312301130_-_to_protect_and_infect_part_2_-_jacob.html|media.ccc.de - To Protect And Infect Part 2: The militarization of the Internet by Jacob Appelbaum.]
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== CONJECTURE ===
""Alias"" :
""Tags"" :
""Short Description"" : A RF communication protocol used by [[HOWLERMONKEY]] devices.
""Category"" : program
""Family"" :
""Related items"" : [[HOWLERMONKEY]]
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://cryptome.org/2014/01/nsa-codenames.htm|cryptome.org - NSA codenames]
=== CONTRAOCTAVE ===
""Alias"" :
""Tags"" :
""Short Description"" : Collection mission tasking tool
""Category"" : program
""Family"" : collect
""Related items"" :
""Related items (parents)"" :
""Related items (children)"" :
""Compartments"" :
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.theatlantic.com/technology/archive/2013/08/an-educated-guess-about-how-the-nsa-is-structured/278697/|theatlantic.com - An Educated Guess About How the NSA Is Structured]
[http://theweek.com/article/index/245360/solving-the-mystery-of-prism|theweek.com -Solving the mystery of PRISM - The Week]An analyst sits down at a desk. She uses a tool, like PRISM, to analyze information collected and deposited in a database, like CONTRAOCTAVE.
=== CONVEYANCE ===
""Alias"" :
""Tags"" :
""Short Description"" : [[CONVEYANCE]] is a final layer of filtering to reduce the intake of information about Americans, it provides filtering for [[PRISM]] and filtering the voice content processed by S3132. The CONVEYANCE's informations are stocked in [[NUCLEON]].
""Category"" : program
""Family"" : process
""Related items"" : [[PRISM]] [[NUCLEON]]
""Related items (parents)"" : [[SCISSORS]]
""Related items (children)"" : [[NUCLEON]]
""Compartments"" : [[TOP SECRET]] [[SI]] [[ORCON]] [[NOFORN]]
""Status"" :
""Agency"" : NSA
""Links"" :
* [http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/|washingtonpost.com - NSA slides explain the PRISM data-collection program]
* [https://pad.lqdn.fr/p/nsa_surveillance_tools2|en.wikipedia.org - Slide of PRISM collection dataflow]
=== CORALINE ===
""Alias"" :
""Tags"" : [[gsm]] [[phone]]
""Short Description"" : [[SIGINT]] for locating cellphone in Sabana Seca (PR)
""Category"" : program
""Family"" : collect
""Related items"" : [[JACKKNIFE]] [[TIMBERLINE]] [[CORALINE]] [[SCS]] [[MOONPENNY]] [[CARBOY]] [[GARLICK]] [[LADYLOVE]] [[SOUNDER]] [[LEMONWOOD]] [[SHOALBAY]] [[SNICK]] [[STELLAR]] [[SCALPEL]] [[IRONSAND]]
""Related items (parents)"" : [[PRISM]]
""Related items (children)"" :
""Compartments"" : [[TOP SECRET]] [[SI]] [[REL TO USA]] [[REL TO AUS]] [[REL TO CAN]] [[REL TO GBR]] [[REL TO NZL]] [[FVEY]]
""Status"" : active
""Agency"" : NSA