Thread by @innercitypress

OK - CIA #Vault7 leaks trial US v. Josh Schulte, Day 3, with FBI Agent Evanchec cross examined by Schulte. Inner City Press is covering the case innercitypress.com/sdnylive97schu… and seeking to unseal leagle.com/decision/infdc… and will live tweet, thread below

https://twitter.com/innercitypress/status/1537255211915427841

The day began with discussion of the courtroom sealing that Inner City Press has opposed (and will continue to oppose) documentcloud.org/documents/2205…

Jury entering!
Judge Furman: Juror 15, I take it that my deputy conveyed to you...
[A nod]
Judge Furman: Very good. Proceed, Mr. Schulte.
Schulte: Good morning. Yesterday you testified about the search of my Manhattan apartment. How many agents?
Evanchec: 8 to 15.

Schulte: How long did you take?
FBI Agent Evanchec: 14 to 15 hours.
Schulte: For a one bedroom apartment?
Evanchec: Yes.
Schulte: You seized all the electronics - how many?
Evanchec: Two servers, desk tops, thumb drives, hard drives...

Schulte: There was no National Defense Information discovered on my mp3 players, correct?
Evanchec: Not that I recall.
Judge Furman: Jurors, National Defense Information is a legal term. You'll decide it is or isn't.

Schulte: Was there any classification review by the CIA of the IRC chats?
Evanchec: I don't recall.
Schulte: You seized 20 terabytes of data to try to find anything on me, correct?
Evanchec: That is not the goal of our investigations.

Schulte: Your search warrants for GitHub and Reddit, you found no National Defense Information, correct?
Evanchec: No we did not.
Schulte: And here you found a movie, Robin Hood with Kevin Costner, correct?
Evanchec: Correct.

Schulte: You said you found documents in the headboard of my bed, right? All my CIA documents?
Evanchec: Most of them.
Schulte: Like my CIA pay stubs.
A: Yes.
Schulte: And just because an email has full names doesn't mean it's classified, right?
A: It might be.

Schulte: Your notes here, they contain the last names of covert operatives of the CIA, correct?
Evanchec: Well, just one.
Schulte: But that's a violation, isn't it?
Evanchec: I'm not a classification authority.
Schulte: Did you purposefully disclose NDI?

AUSA Lockard: Objection!
Judge Furman: Sustained.
Schulte: But the government never charged you with a crime, correct?
AUSA: Objection.
Judge: Sustained.
Schulte: Let's talk about Google searches.

Schulte: During this time period, Wikileaks released the DNC emails, right?
Evanchec: Yes.
Schulte: And there was a fiasco with your director, Comey, right? There was Guccifer 2.0,right?
Judge Furman: Do you know what Guccifer 2.0 is?
Evanchec: No, sir.

Schulte: There were also the Shadow Brokers... Is it your understanding that Wikileaks has NSA code?
Evanchec: I do not know about that.
Schulte: Did you know that 80% of the searches you claim I made about Wikileaks were not in fact searches at all?
Evanchec: No.

Schulte: Are you aware of Google News?
Evanchec: I do not not regularly use Google - so, no.
Schulte: Did you know Google makes a special log in your search history when you're using Google News?
Evanchec: No.
[Aside: I've had a Hezbollah alert since Saab trial]

Note: Schulte indicated he had 45 minutes more of cross of Evanchec; it's been more than that already. The next witness is a so-called sealed witness - Inner City Press may have to pause live tweeting for a bit, but thread will resume asap. documentcloud.org/documents/2205…

Interim update 1: the FBI surveilled Schulte family vacation in San Diego.
Jurors look interested.

Interim update 2: Schulte went overtime with his cross and re-cross. Here's some of it (trial resumes with "sealed" session at 12:20 pm, so this'll be supplemented later)
The FBI found people to wear wires and talk to Schulte about Wikileaks.

The FBI had people "bump" into Schulte at a bachelor party and just, oh by the way, bring up Wikileaks and record him.
Schulte made a point of asking, did the FBI surveil my mother and me going to Starbucks? Yes.
Jurors looked interested, like it was a tennis match

OK - "sealed" session about to begin - thread will continue later, watch this feed

Whew - out of sealed courtroom after 2 1/2 hours. "Now it can be told" - well, sort of --
The witness, who cannot be physically described under the order, is Anthony Leonis. He was Schulte's supervisor. He identified Schulte as "the man with the shaved head"

Leonis: On March 7, 2017 I was supposed to drive my boss, I was looking forward to the time to talk - but the Vault 7 leak came out on Wikileaks and they said, everyone to the office! There, the conference room was full. Brutal Kangaroo could no longer be used

AUSA Denton showed on the screen the Brutal Kangaroo / Drifting Deadline users' guide.
AUSA Denton: What is air gap jumping?
Leonis: A thumb drive infects one computer, and it spreads onto another thumb drive.
On the screen: EZCheese LinkFiles / Giraffe Links

Questioning turns back to the decision to relocate Schulte after restraining order against Amol. Email to Schulte: "As discussed, please move to your cubicle." Josh = 9W53-020
Emails involved Debra, Bonnie B. Smith, Frank Stedman, Leonard Small, Patrick Schaffer

Then moving cubicles deemed not enough. Josh to AED/RDB (under Leonis), Amol AED/MDB. Schulte responds with emails that he assumes this is punishment for reporting Amol and getting the protective order. He gets no written answer; writes again.

Schulte was allowed to contribute to, but not administer, OSB Libraries. But, Leonis complains, he still did - & told Jeremy he'd been authorized. Alert! Leonis says he began to consider stripping all of Schulte's access.
[A bureaucratic stations of the Cross]

Schulte did not get to start cross examination of Leonis today. AUSA Denton said he has an hour more of direct. So, 10 am tomorrow, the cross. And unlike today - sorry, in sealed courtroom, constrained - Inner City Press will aim to get back to live tweeting.

Soon story on today, tale on today, with more seal courtroom details, on InnerCityPress.com and patreon.com/MatthewRussell…