In light of what we've recently learned about CrowdStrike's involvement in the probe of the DNC hack, I revisited Donna Brazile's book.

She makes several revelations given what we now know...
1. Sometime in May, CrowdStrike came to DNC and proposed taking their systems offline so the hack can be remediated. The DNC asked CS to wait for one month because the party was in the middle of primaries.

During this one month delay, 10,000s of DNC's emails were stolen...
... From the new House Intel transcripts (Tamene testimony), we know CS identified APT28 and APT29 sometime around May 10-15, 2016. Brazile's info about the one-month delay fits perfectly with this considering that CS took DNC systems offline June 11-13...
... if DNC asked for exactly one month, the CS identification of the hackers and request to take the systems offline likely occured on or around May 11...
2. Shortly before the first Wikeaks email dump, Brazile's phone started acting weird, asking for her password. She called tech support and was told to delete her email account.

I was assuming CS would wipe the phones of major DNC figures a month earlier...
3. According to the book, DNC had spent $2 million on CrowdStrike services by October 5, 2016, a stupendous figure considering the committee got its email stolen after hiring the firm.

But the hackers were even out of DNC's systems yet...
4. On October 21, 2016, a volunteer cybersecurity team discovered malware on a crucial DNC server to which all of the systems backed up. The cyber folks said the hackers basically had the keys to the castle...
... the system, which the DNC called Raider, was supposed to be remediated by CrowdStrike in June, but still had malware on it trying to communicate with a foreign server in late October 2016...
At this point, the volunteer team, which Brazile called "Hacker House", lost confidence in CrowdStrike's remediation. The malware lived in the system's memory. Hacker House eventually removed it...
5. Brazile wrote that CrowdStrike's Falcon software was still running on DNC systems as of October 5, 2016. This is notable because CrowdStrike told me last month that...
"There is no indication that there was ever a breach on any DNC server or computer protected by CrowdStrike’s technology."

Was Falcon on the DNC email server when it was hacked in late May 2016? If no, why not? If yes, is CS saying Mueller is wrong and the server wasnt hacked?
6. Brazile, like others from DNC, MIS Department, CrowdStrike and Perkins Coie, wrote that the DNC fully cooperated with the FBI.

She wrote that the FBI issued a list of things they wanted and DNC/CS worked to check every item off the list. Was the email server on the list?...
7. Up to 16 Silicon Valley superstars volunteered to help the DNC after the hack. This "Hacker House" team lost confidence in the CrowdStrike remediation, but trusted CS's assessment that the Russians did it. Hacker House never confirmed the attribution to Russia, Brazile wrote.
8. Side note: If you can look past the politics, Brazile's book is actually a key account into the crazy last months of the 2016 election. She doesn't hold back on criticism of the DNC, the Clinton campaign, etc. I can see now why Fox would hire her...
... Hacks: The Inside Story of the Break-ins and Breakdowns That Put Donald Trump in the White House

https://www.amazon.com/dp/0316478504/ref=cm_sw_r_cp_api_i_XEobFb9FHCW2A

...
You can follow @IvanPentchoukov.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: