January 11 2021 Cybercrime and Analytics Situational Awareness Bulletin LAW ENFORCEMENT SENSITIVE Intelligence Summary United States Capitol Riot Data Archives On January 11 2021 analysts with the Internet Cover Operations Program iCOP identified social media posts from individuals making a collective effort to archive data from the January 6 2021 protests on the United States Capitol Analysis Background The violent protests that took place at the United States Capitol building on January 6 2021 has elicited a response from the major tech companies to remove the alternative Social Media platform Parler from their respective platforms Specifically Google and Apple have removed the mobile application from their App Stores while Amazon has suspended their web hosting services noting that the violent nature of the content violates the terms of service i Parler Chief Executive Officer John Matze informed the public “There is the possibility Parler will be unavailable on the internet for up to a week as we rebuild from scratch” and “We will try our best to move to a new provider right now as we have many competing for our business” ii As of January 10 2021 at 2359 hours Parler has been shut down and is no longer accessible Parler Website Dump Twitter user ‘@donk_enby’ an experienced Mobile Reverse Engineer and Data Miner iii released an archive of Parler posts made during the January 6 2021 US Capitol protest Image 1 The tweet posted on January 9 2021 at 0820 hours provided a URL to access the archived data which includes raw files of images videos posted on Parler with metadata iv Additionally ‘@donk_enby’ provides a Reverse Engineer Parler Application Programming Interface API as a Python library with all endpoints present in the iOS app This provides individuals the ability to identify individuals on the platform check internal moderators admins user interfaces view influencer network status etc v Please see Attachment #1 – API Screenshots below for further details Image 1 LAW ENFORCEMENT SENSITIVE The enclosed information was collected and disseminated pursuant to the authority of the United States Postal Inspection Services set forth in 18 U S C 3061 and subject to the protection and limitation of the Privacy Act Title 5 U S C §552a and Postal regulations 39 CFR Parts 261-267 issued thereunder The information is law enforcement sensitive in nature and must be treated accordingly The information may only be used for a purpose consistent with the approved uses as set forth in the appropriate system of records set forth in Postal Handbook AS-353 Guide to Privacy the Freedom of Information Act and Records Management The information cannot be further released disseminated disclosed or transmitted withou t prior approval of the Chief Postal Inspector or his authorized delegate Unauthorized release of this information may result in criminal and civil sanctions pursuant to the Privacy Act and associated regulations and may also result in debarment from furt her receipt of information Situational Awareness Bulletin LAW ENFORCEMENT SENSITIVE UNITED STATES POSTAL INSPECTION SERVICE Cybercrime Analytics Capitol Protest Public Media Server On January 6 2021 at 1849 hours the search engine and data archive company Intelligence X tweeted that they set up a secure public media server for users to submit pictures and videos for archive and public sharing from the Capitol Protestvi Image 2 The server utilizes features including duplicate management archival redundancy services spreadsheet CSV XLSX based viewer with file information metadata and 80 Terabytes of available storage space Content can be viewed from the web based URL or from Windows File Explorer As of January 10 2021 the media server has over 200 Gigabytes of data and has surpassed 10 Terabytes of download traffic vii Image 2 Final Assessment Although Parler is currently inactive and inaccessible efforts fronted by ‘@donk_enby’ Intelligence X and public contributions of data can assist law enforcement in the analysis and identification of parties involved in the US Capitol Protests The archived information can assist in the possible mitigation of future violent protests For questions regarding this report please contact ISIAR@usps gov End of Report i https techcrunch com 2021 01 09 amazon-web-services-gives-parler-24-hour-notice-that-it-will-suspend-services-to-the-company https twitter com parlertakes status 1348097074772930560 iii https twitter com donk_enby iv https donk sh 06d639b2-0252-4b1e-883b-f275eff7e792 v https git tcp direct d0nk parler-tricks vi https twitter com _IntelligenceX status 1346967229187952644 vii https twitter com _IntelligenceX status 1348479548640387073 ii 2 P a g e S i t u a ti o na l A w a r e n ess B u l l e ti n LAW ENFORCEMENT SENSITIVE The enclosed information was collected and disseminated pursuant to the authority of the United States Postal Inspection Services set forth in 18 U S C 3061 and subject to the protection and limit ation of the Privacy Act Title 5 U S C §552a and Postal regulations 39 CFR Parts 261-267 issued thereunder The information is law enforcement sensitive in nature and must be treated accordingly The information may only be used for a purpose consistent with the approved uses as set forth in the appropriate system of records set forth in Postal Handbook AS-353 Guide to Privacy the Freedom of Information Act and Records Management The information cannot be further released disseminated disclosed or transmitted without prior approval of the Chief Postal Inspector or his authorized delegate Unauthorized release of this informa tion may result in criminal and civil sanctions pursuant to the Privacy Act and associated regulations and may also result in debarment from further receipt of information Situational Awareness Bulletin LAW ENFORCEMENT SENSITIVE UNITED STATES POSTAL INSPECTION SERVICE Cybercrime Analytics Attachments Attachment #1 – API Screenshots 3 P a g e S i t u a ti o na l A w a r e n ess B u l l e ti n LAW ENFORCEMENT SENSITIVE The enclosed information was collected and disseminated pursuant to the authority of the United States Postal Inspection Services set forth in 18 U S C 3061 and subject to the protection and limit ation of the Privacy Act Title 5 U S C §552a and Postal regulations 39 CFR Parts 261-267 issued thereunder The information is law enforcement sensitive in nature and must be treated accordingly The information may only be used for a purpose consistent with the approved uses as set forth in the appropriate system of records set forth in Postal Handbook AS-353 Guide to Privacy the Freedom of Information Act and Records Management The information cannot be further released disseminated disclosed or transmitted without prior approval of the Chief Postal Inspector or his authorized delegate Unauthorized release of this informa tion may result in criminal and civil sanctions pursuant to the Privacy Act and associated regulations and may also result in debarment from further receipt of information