In The Matter Of: United States vs. PFC Bradley E. Manning Vol. 2 June 4, 2013 UNOFFICIAL DRAFT - 6/4/13 Morning Session Provided by Freedom of the Press Foundation Min-U-Script(R) with Word Index UNOFFICIAL DRAFT - 6/4/13 Morning Session 1 1 VOLUME II 2 IN THE UNITED STATES ARMY 3 4 UNITED STATES 5 VS. 6 MANNING, Bradley E., PFC 7 U.S. Army, xxx-xx-9504 8 Headquarters and Headquarters Company, 9 U.S. Army Garrison, 10 Joint Base Myer-Henderson Hall, 11 Fort Myer, VA 12 COURT-MARTIAL _______________________________________/ 22211 13 14 15 The Hearing in the above-titled matter was 16 held on Tuesday, June 4, 2013, at 9:30 a.m., at 17 Fort Meade, Maryland, before the Honorable Colonel 18 Denise Lind, Judge. 19 20 21 Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 2 1 DISCLAIMER 2 This transcript was made by a court 3 reporter who is not the official Government reporter, 4 was not permitted to be in the actual courtroom where 5 the proceedings took place, but in a media room 6 listening to and watching live audio/video feed, not 7 permitted to make an audio backup recording for editing 8 purposes, and not having the ability to control the 9 proceedings in order to produce an accurate verbatim 10 transcript. 11 12 This unedited, uncertified draft transcript 13 may contain court reporting outlines that are not 14 translated, notes made by the reporter for editing 15 purposes, misspelled terms and names, word combinations 16 that do not make sense, and missing testimony or 17 colloquy due to being inaudible by the reporter. 18 19 20 21 Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 3 1 APPEARANCES: 2 3 ON BEHALF OF GOVERNMENT: 4 MAJOR ASHDEN FEIN 5 CAPTAIN JOSEPH MORROW 6 CAPTAIN ANGEL OVERGAARD 7 CAPTAIN HUNTER WHYTE 8 CAPTAIN ALEXANDER van ELLEN 9 10 ON BEHALF OF ACCUSED: 11 DAVID COOMBS 12 CAPTAIN JOSHUA TOOMAN 13 MAJOR THOMAS HURLEY 14 15 16 17 18 19 20 21 Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 4 1 INDEX 2 June 4, 2013 3 4 WITNESS: DAVID SHAVER 5 DIRECT EXAMINATION 6 CROSS EXAMINATION Page 5 14 7 8 WITNESS: 9 DIRECT EXAMINATION 15 CROSS EXAMINATION 28 10 MARK JOHNSON 11 12 WITNESS: ADRIAN LAMO 13 DIRECT EXAMINATION 39 14 CROSS EXAMINATION 54 15 REDIRECT EXAMINATION 71 16 17 18 19 20 21 Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 5 1 PROCEEDINGS - MORNING SESSION 2 3 THE COURT: MR. MORROW: All present with exception Captain Overgaard. 6 7 Trial counsel, please account for parties. 4 5 Court is called to order. THE COURT: Any issues we need to address before we proceed today? 8 MR. COOMBS: No, Your Honor. 9 MR. MORROW: David Shaver. 10 David Shaver. Whereupon, 11 DAVID SHAVER, 12 called as a witness, having been first duly sworn to 13 tell the truth, the whole truth, and nothing but the 14 truth, was examined and testified as follows: 15 16 17 18 EXAMINATION BY MR. MORROW BY MR. MORROW: Q. You are Dave Shaver, Special Agent, special inspector (inaudible) for the (inaudible) 19 A. Yes, sir. 20 Q. Special Agent Shaver, how long have you 21 worked for (inaudible) Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 6 1 A. For about a year and a half, sir. 2 Q. What do you (inaudible) 3 A. Special agent. 4 Q. What specifically, what kind of work do you 5 6 do as special agent? A. Sir, my job mainly is to take digital media 7 which has been generated as part of a search warrant or 8 a subpoena and turn it into usable format in 9 (inaudible) 10 Q. Explain the (inaudible)? 11 A. It's special (inaudible) 12 Q. Before becoming a special agent with the 13 14 Department of Treasury, what did you do? A. Sir, I was the special agent in charge for 15 the research branch of Computer Crime Investigative 16 Unit. 17 18 19 Q. What is the Computer Crime Investigative Unit? A. It's a unit of CCIU main focus CCII focus 20 investigate any intrusion computer (inaudible) in 21 support of that mission. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 7 1 Q. When did you begin working for Army CCIU? 2 A. In 1999. 3 Q. Can you describe your process throughout the 4 5 organization there? A. Yes, sir. In 1999 CCIU as enlisted temp and 6 2001 I left the army and 2000 early 2002 I came back to 7 work for CCIU as (Inaudible). 8 (Inaudible). 9 Q. You are not a CCIU? 10 A. No, sir. 11 Q. (Inaudible) 12 A. 2005. 13 Q. Is that supervisory position? 14 A. Yes, it is. 15 Q. How many people did you supervise? 16 A. I directly supervised five. 17 18 19 20 21 In 2003 I became a I also supported about 78 examiners worldwide. Q. What kind of work did you do as special agent in charge of (Inaudible)? A. Forensic evidence in counter intelligence minimum I also policies for procedures methods and also Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 8 1 (Inaudible) 2 Q. What do you mean by tool validation? 3 A. It's concerning digital (inaudible) tools. 4 To make sure the forensic program actually did what it 5 was supposed to do. 6 Validated the findings. Not what it was supposed to. 7 Q. Do you have any formal education? 8 A. Yes, sir, I do. 9 Q. From where? 10 A. (Inaudible). 11 Q. What was your major there? 12 A. Sociology criminology. 13 Q. Background CV. 14 A. Simply just examination after digital media. 15 Q. What is the digital media? 16 THE COURT: 17 MR. HURLEY: 18 Just a moment. Accept special agent as expert in computer forensics. 19 MR. MORROW: 20 THE COURT: 21 (Inaudible) The CV? (Inaudible) That's fine. BY MR. MORROW: Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 9 1 Q. Special Agent shaver, what is digital media? 2 A. Digital media is just that. Electronics such 3 as cell phone, a computer, a server, any cell phone 4 (Inaudible). 5 Q. Did you receive any certifications? 6 A. Yes, sir. 7 Q. What are those? 8 A. First ones the (Inaudible). 9 10 11 12 training Georgia. Certified criminal defense center otherwise DC3 Maryland. Q. Specialist (Inaudible) Have you published any articles related to computer forensics? 13 A. Yes, I have. 14 Q. What is that? 15 A. In 2009 I chapter concerning (Inaudible) 16 Q. Have you attended any conferences? 17 A. Yes, sir, I have. 18 Q. What are those conferences? 19 A. The annual Department of Defense Conference 20 21 and the Annual Software Conference. Q. Did you ever receive any awards as a result Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 10 1 2 of your work? A. Yes, sir, I have. In 2009 (inaudible) award 3 contribute forensic evidence, from the International 4 Chief of Police. 5 Q. What was that award for? 6 A. Two. One was (inaudible) and criminal 7 investigations and tool to examine computers to 8 determine (inaudible) 9 Q. What do you mean by virtual? 10 A. Virtual machine in this case we would take a 11 forensic item and convert it into machine so your 12 computer would be considered the host and the first 13 machine would be the guest. 14 any operating system, whether it be MAC or Windows. 15 The advantage of this is to see the computer as the 16 person. 17 Q. (Inaudible) to see the computer desktop? 18 A. Same desktops, wallpaper, same program. 19 The guest computer can be It is their computer. 20 Q. Thank you. What is a forensic image? 21 A. The forensic image, technically computers are Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 11 1 organized spaced lowest level (inaudible) operating 2 system but I know being two test wheels. 3 is either a 1 or a zero that is called a bit. 4 forensic image is it's bit by forensic image. 5 (Inaudible) tool would be the first zero and next byte 6 with us write the one. 7 has been copied. And that it So Continue to do this until media 8 Q. You said forensic item. 9 A. I used EnCase for this program. 10 Q. After the EnCase, what happens? 11 A. (Inaudible) hash value and you think hash 12 What tool is -- value digital fingerprint. 13 Q. If two values match, what does that tell you? 14 A. They are the exact same thing. 15 Q. Verified hash values. 16 17 18 19 20 21 What is the next step or examining the computer? A. The next step would be to answer the questions which is posed by (inaudible). Q. You mentioned EnCase. Can you describe what EnCase is? A. EnCase is basically the standard used Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 12 1 throughout the market. 2 Used by both government and corporate entities. 3 Q. And who owns EnCase? 4 A. That's a company (inaudible) in California. 5 Q. (Inaudible) EnCase to examine or create 6 images? 7 A. You are allowed to view files in native 8 format without altering them. Gives you the ability to 9 (inaudible) spaces -- (inaudible). 10 Q. Alright. 11 A. Allocate space is just that, files that are 12 allocated. 13 there. 14 What is the allocated space? never been used. 15 If you create a folder on allocated. It's Unallocated are deleted files on a hard drive Q. You said allocate has never been used. Does 16 EnCase or tools like that, do they allow you to see 17 deleted files or files that may have existed and are 18 now gone? 19 A. Yes, sir. 20 Q. Explain that, please. 21 A. Again, if you think of a computer like a Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 13 1 library. 2 the catalog. 3 book is. 4 You want to find a certain book. You go to It will tell you where in the library the In a computer obviously Windows is 5 something (inaudible). 6 file, the operating system will go down the master file 7 table, locate where on the hard drive the file is and 8 retrieve it for you. 9 If you would like to view a So when you delete the file, all you 10 basically do is remove the entry from the master file 11 table or remove the card from the catalog. 12 that, the book is still physically in the library but 13 you can't access it. 14 Q. If you do When you say the book is still in the 15 library, with the data still on the computer, are you 16 always able to recover the full file or partial file? 17 A. Again, once the computer erases the file 18 space in the file is now free to be used for something 19 else. 20 to write something, it could overwrite part or all of 21 the file. It's free to use. If the operating system needs Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 14 1 Q. What do you mean by overwrite? 2 A. Use the space for another file. If you 3 download some movies, it needs to put them somewhere, 4 it may overwrite deleted files. 5 MR. MORROW: At this time the United States 6 offers Special Agent Shaver as expert in computer 7 forensics. 8 THE COURT: 9 10 Alright. EXAMINATION BY HURLEY BY MR. HURLEY: 11 Q. Good morning, Mr. Shaver. 12 A. Good morning. 13 Q. You talked about the process of taking a 14 forensic image. You would agree with me in an 15 investigation that you are doing the forensic 16 examination, you are going to document things? 17 A. Yes, sir. 18 Q. You're going to have guidance from another 19 investigator and they are going to tell you what to 20 look for? 21 A. Yes, sir. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 15 1 2 Q. If you find anything related to what you have been told to look for, you're going to document it. 3 Nothing further. 4 THE COURT: 5 MR. MORROW: 6 THE COURT: 7 temporarily excused. 8 than counsel while trial is still going on. 9 Redirect. No, Your Honor. Special Agent Shaver, you are You cannot talk with anyone other Call your next witness. 10 MR. MORROW: Yes, Your Honor. 11 calls Mr. Mark Johnson. 12 United States Whereupon, 13 (Inaudible). MARK JOHNSON, 14 called as a witness, having been first duly sworn to 15 tell the truth, the whole truth, and nothing but the 16 truth, was examined and testified as follows: 17 18 19 20 21 EXAMINATION BY MR. MORROW BY MR. MORROW: Q. You are Mark Johnson, Army Computer Forensic Investigative Unit, Army Criminal (Inaudible) A. I am. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 16 1 2 Q. Mr. Johnson, what is your current position with CCIU? 3 A. Digital Media Examiner. 4 Q. And you work for CCIU or you work for the 5 Digital Media Branch of CCIU? 6 7 THE COURT: Maybe speak a little slower. 8 9 I'm having trouble hearing you. THE WITNESS: Yes, ma'am. BY MR. MORROW: 10 Q. Where do you work? 11 A. I'm (inaudible) 12 Q. Do you work for CCIU? 13 A. I work for a branch, subunit of CCIU. 14 Q. How long have you been in Digital 15 (inaudible)? 16 A. Approximately June 2006. 17 Q. Are you a special agent? 18 A. No, sir. 19 Q. What is your position? 20 A. I'm a contract employee assigned to 21 (inaudible). Question again. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 17 1 2 Q. When did you become a contract employee for CCIU? 3 A. In June 2006. 4 Q. So were you hired specifically to work at 5 CCIU for your contract? 6 A. Yes. 7 Q. What does a digital forensic examiner do? 8 A. We are responsible for examination of digital 9 10 or media tool (inaudible) anything related to computers. 11 Q. What do you mean by network device? 12 A. (Inaudible) routers, switches, communication. 13 Q. Do you hold a supervisory position at CCIU? 14 A. I do. 15 Q. What is that position? 16 A. I (inaudible) 17 Q. How many people do you supervise? 18 A. I currently have two subordinates. 19 Q. Do you hold any certifications in Digital 20 (inaudible)? 21 A. Yes, sir. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 18 1 Q. What are those? 2 A. Certified through the (Inaudible) DC3. 3 4 5 hold digital (Inaudible). Q. I (Inaudible) Do you hold any other industry certifications? 6 A. I do. 7 Q. What certifications do you hold? 8 A. I am a certified information systems security 9 professional also known as CCISP. 10 Q. Can you explain what is CCISP? 11 A. Industrial standard certification respect in 12 the industry covers lots of domains related to 13 (Inaudible). 14 Q. When did you obtain that certification? 15 MR. HURLEY: 16 THE COURT: 17 18 19 20 21 We'll stipulate to Mr. Johnson. Do you have initial foundation questions? MR. MORROW: I'll quickly review, Your Honor. At this time we'll offer Mr. Johnson as an expert in computer forensics. MR. HURLEY: No objection. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 19 1 2 THE COURT: So recognized. BY MR. MORROW: 3 Q. (Inaudible) 4 A. Mr. No special agent Frederick. 5 Q. (Inaudible) 6 A. (Inaudible) 7 Q. Prior to Special Agent Shaver, who is the 8 special agent in charge of? 9 A. Special agent (Inaudible). 10 Q. How long did you work with (inaudible) 11 A. Since June of 2006. 12 Q. Typically now and also in your work with 13 14 Special Agent Shaver, how do you receive (inaudible) A. Receive a forensic request in writing that 15 details what is supposed to be looking for, what 16 evidence we are to look at, the type of information we 17 are looking for, the legal basis and other related 18 information. 19 Q. 20 21 Is this request for examination, is a formal document? A. Yes, sir. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 20 1 2 Q. When you receive request for an examination, how long does a examination typically take? 3 A. Anywhere from a day or two, months or years. 4 Q. You said years? 5 A. Yes, sir. 6 Q. Why the variance? 7 A. We have wide swaths of what we are looking 8 for, the detail how much in-depth we need to get into. 9 Also sheer volume. 10 We have exams that (inaudible). Takes a lot of time. It's not like you see on TV. 11 Q. What is your task? 12 A. We generate a report. 13 Q. Where is that report sent? 14 A. It's reviewed by a number of people. 15 Q. Is it a formal report, informal report? 16 A. Either or. 17 Q. Why either or? 18 A. It depends on the scope of what was needed. 19 Sometimes if it's an examination, not likely to be any 20 further investigative, it may or -- however in this 21 situation (Inaudible). Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 21 1 Q. You said AI? 2 A. That is a CCID format of investigative 3 report. 4 Q. 5 More of memo type arrangement. In the report generating process does anyone review your work for accuracy? 6 A. Yes, sir. 7 Q. How does that process work? 8 A. We have a peer review process, other 9 examiners in the office review the report and the 10 foundation behind it, make sure we covered everything, 11 that the findings are accurate. 12 13 Q. When you are assigned a piece of digital media, do you work on that alone? 14 A. Not always. 15 Q. Can you explain that, please. 16 A. In some cases the work involves all of us or 17 in the case it is a collaborative process, just like 18 your teams split case when it's gets complicated. 19 20 21 Q. So if you are splitting up like the (inaudible) digital media how does that work? A. Same piece of evidence. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 22 1 Q. 2 please. 3 A. You say collaborative. Can you explain that, How is the office set up? We have relatively small offices. This is 4 callid the (inaudible) about the size of a closet. 5 actually sit right next to each other. 6 MR. MORROW: 7 We Just one moment. Mr. Johnson, in your involvement in this 8 case did you examine any digital media associated with 9 the investigation in this case? 10 A. Yes, sir. 11 Q. What did you observe? 12 A. Forensic evidence from an external hard 13 drive. 14 Q. What did you say? 15 A. Forensic evidence from a MAC and Pro hard 16 drive, external hard drive. 17 Q. What is that Pro- 18 A. Apple product for laptop. 19 Q. Let's start with the external. 20 21 What is an external drive? A. External drive is external piece for storage Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 23 1 media, all shapes and sizes. 2 container that contained an internal hard drive 3 connected to the computer with USB. 4 5 6 7 Q. In this case it's a Did you examine the actual external drive in this case? A. (Inaudible) that was collected by the collecting agent. 8 Q. Is that the (Inaudible)? 9 A. Yes, sir. 10 Q. To your knowledge where was this item 11 collected? 12 A. PFC Manning's. 13 Q. Who asked you to imagine an external hard 14 15 16 17 18 drive? A. I don't recall specifically who. Ultimately it came from the original case unit, Agent Graham. Q. Let's talk about your process of examining the external hard drive. What did you do first? 19 A. We checked out the evidence from our evidence 20 lockup. 21 We copied it to our examination workstation. Brought it back to our examination station. Provided by Freedom of the Press Foundation Loaded it UNOFFICIAL DRAFT - 6/4/13 Morning Session 24 1 into and EnCase and validated the image is hash. 2 Q. Why do you validate the image as hash? 3 A. Make sure the evidence file matches what is 4 originally collected. 5 during my examination, come up with a mathematical 6 value and compare that with the value that's embedded 7 in the file itself. 8 collection documentation. 9 Q. The EnCase will copy the hash We also compare that with evidence Were there any verification issues with the 10 hash value for the external hard drive that you 11 examined? 12 A. No, sir. 13 Q. And during your examination of the external 14 hard drive did you find anything of interest in this 15 investigation? 16 17 A. We did. There were three pieces of information that we found that might be related. 18 Q. And what were those pieces of information? 19 A. Text file. 20 21 We found a PowerPoint presentation and video. Q. Was the text file located on the external Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 25 1 hard drive? 2 A. It was stored in (Inaudible). 3 Q. When you reviewed the information in EnCase, 4 were you able to determine when the file was created? 5 A. Yes. 6 Q. And how did you determine when the file was 7 8 9 created? A. The file system contains operation date sometimes. 10 Q. When is that (inaudible)? 11 A. Data about data. 12 information about the file itself. 13 Q. 14 essentially? 15 A. 16 17 18 19 20 21 In this case the How does EnCase show you that data Explain that, please. EnCase in this situation will show it to me in a spreadsheet like format. Q. Do you recall when this text file was created? A. To my recollection it was 29 November of 2000 -- (Inaudible). Q. When you found this text file, did you review Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 26 1 the contents of the text file? 2 A. I did. 3 Q. I'm retrieving what has been marked as 4 Prosecution Exhibit 24 for identification. 5 I'm handing the witness what has been 6 marked as Prosecution Exhibit 24 for identification. 7 Mr. Johnson, do you recognize this document? 8 A. I do. 9 Q. And what is it? 10 A. This is the contents of a text file 11 (inaudible.) 12 Q. 13 Does this document accurately depict the text file you found on the external hard disk drive? 14 A. It does. 15 Q. If you printed this text file as you found 16 it, is this how it would appear? 17 A. Yes. 18 Q. Where was this file found? 19 A. In the allocated (inaudible) 20 Q. Move to admit Exhibit 24 for identification 21 as evidence. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 27 1 2 3 4 (Pause) BY MR. MORROW: Q. Mr. Johnson, you say you also found a PowerPoint? 5 A. Yes. 6 Q. Where was this PowerPoint? 7 A. Allocated file system. 8 Q. Do you recall the name of the file? 9 A. Not specifically. 10 (inaudible). 11 Q. 12 I do know it was So it's like the free (inaudible) Your Honor, I'm retrieving what would be 13 Prosecution Exhibit 25 for identification. 14 the witness what would be Prosecution Exhibit 25 for 15 identification. 16 I'm handing I'm handing the witness what would be 17 marked as 25 for identification. 18 Prosecution Exhibit 24. 19 20 21 Retrieving Mr. Johnson, do you recognize this document? A. I do. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 28 1 Q. What is it? 2 A. It is the PowerPoint that's been opened. 3 Q. (Inaudible) Open Office Presentation? 4 A. Open Office is the version that would be 5 6 7 PowerPoint clone. Q. It is a representation referring to printed form? 8 A. Yes, sir. 9 Q. I'm retrieving what would be marked as 10 Prosecution Exhibit 25 for identification. 11 No further questions, Your Honor. 12 EXAMINATION BY MR. HURLEY 13 BY MR. HURLEY: 14 Q. Good morning. 15 A. Good morning. 16 Q. In the investigative process, the process of 17 taking forensic images, and what you do with those, 18 fair to say, you take a forensic image and you perform 19 your investigation? 20 A. Yes. 21 Q. When you are doing your investigation, you Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 29 1 are going to have things that you are looking for? 2 A. Yes, sir. 3 Q. And when you're talking about a computer or a 4 hard drive, there is a lot of different types of 5 information that you can have on that particular media? 6 A. Yes, sir. 7 Q. Emails? 8 A. Yes. 9 Q. PowerPoint presentations? 10 A. Yes. 11 Q. Text files? 12 A. Yes, sir. 13 Q. All potentially valuable. They belong to, in 14 all likelihood, the person who owns that particular 15 media? 16 A. Yes, sir. 17 Q. In this particular case you were looking at 18 all those, you looked at everything on this particular 19 hard drive? 20 A. Yes, sir. 21 Q. And by this hard drive, I'm talking about the Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 30 1 external hard drive? 2 A. Yes, sir. 3 Q. With respect to this case there were 4 particular things you were looking for. You were 5 looking for anything that implicated WikiLeaks; is that 6 correct? 7 A. That is correct. 8 Q. You found, as you talked about on direct, you 9 found some contact information? 10 A. Yes, sir. 11 Q. You didn't find anything else on that hard 12 drive that implicated WikiLeaks? 13 A. I don't recall, sir. 14 Q. Would you have mentioned that in your report? 15 A. Yes, sir. 16 Q. You would have also been looking for anything 17 that would have expressed a hatred of America on that 18 hard drive? 19 A. It would have been noted. 20 Q. You would have looked at everything on the 21 hard drive? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 31 1 A. Yes. 2 Q. If you would have seen that, you certainly 3 would have noted that? 4 A. Yes, sir. 5 Q. You didn't note that on your report? 6 A. No, sir. 7 Q. Because you didn't find it? 8 A. Right. 9 Q. You also would have noted, if you had found 10 anything that related to terrorism? 11 A. Yes, sir. 12 Q. If there was any sort of evidence that 13 suggested that my client was supporting terrorism, you 14 would have noted that? 15 A. Yes, sir. 16 Q. You didn't note anything? 17 A. I did not discover anything, no, sir. 18 Q. You also would have made note of anything 19 that would have shown a transfer of funds? 20 A. If I had discovered anything, yes. 21 Q. If you had found something that seemed like a Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 32 1 lot of money for a PFC to have, you would have noted 2 that? 3 A. Yes. 4 Q. You didn't note that in this case? 5 A. That is correct. 6 Q. And going back to -- actually, no further 7 questions, Your Honor. 8 THE COURT: 9 MR. MORROW: 10 11 No, Your Honor. THE COURT: Mr. Johnson, you are temporarily excused. 12 13 Redirect? MR. MORROW: United States requests a ten-minute recess. 14 THE COURT: 15 MR. HURLEY: 16 (Brief Recess) 17 THE COURT: 18 19 Alright. Any objection. No objection, Your Honor. Please be seated. Ready to proceed? MR. FEIN: Toni Edwards. Stipulation with 20 respect to testimony of Special Agent Toni Edwards, 3 21 January 2013. Prosecution Exhibit 26. Hereby agreed Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 33 1 defense counsel, trial counsel that if Special Agent 2 Edwards were present to testify during the merits of 3 the court martial, he would testify substantially to 4 the following: 5 Since March of 2012, I have been 6 employed as special agent, Homeland Security 7 Investigations, Department of Homeland Investigation 8 Atlanta Field Office, empowered by law to investigate 9 requests for unlawful (inaudible) of goods and 10 technology to destinations outside the United States. 11 Prior to working for HSI from March 2008 12 to March 2012, I was employed as Special Agent with the 13 (inaudible) criminal investigation U.S.A. CI Computer 14 Crime Investigative Unit, CCIU, at Ft. Belvoir, 15 Virginia. 16 In this capacity I was responsible for 17 the investigation of violations pertaining to computer 18 intrusions and to other types of malicious computer 19 activity directed against the United States Army, 18 20 U.S.C 1030. 21 Situational awareness U.S.A. CIDC Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 34 1 Special Agent I was to investigate crimes, all 2 violations of the Uniform Code of Military Justice and 3 other comparable Federal and State Laws where there is 4 United States Army or Department of Defense interest. 5 I have participated and conducted 6 investigations of violations of United States Laws and 7 regulations pertaining to computer intrusions and 8 participated in the execution of search warrants and 9 individuals and companies. 10 Before working at U.S.A. CCIU from 11 November 2007 to November 2008, I was employed as 12 Special Agent with the Bureau of Industry and Security 13 Office of (inaudible) Enforcement. 14 to October 2006, I was a deputy prosecutor for Morgan 15 County, Indiana. 16 And from May 2003 From August 2000 to August 2005, I 17 served in the (inaudible) county, Indiana deputy 18 sheriff's department as deputy sheriff where I received 19 training in evidence collection. 20 21 Further, I am a graduate of Federal Law Enforcement Training Center, Criminal Investigator Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 35 1 Training Program where I also received training in 2 evidence collection. 3 In addition to being employed as Special 4 Agent, I currently serve inactive ready reserve as 5 Judge Advocate in the national District of Columbia. 6 In 2003 I received a juris doctorate from Indiana 7 University and was subsequently admitted to the Indiana 8 Bar. 9 Bachelors of arts in psychology from the 10 University of North Florida and Doctorate Juris 11 Prudence from Indiana University, School of law. 12 Currently licensed to practice law in Indiana. 13 My experience (inaudible) as a state law 14 enforcement officer, state prosecutor and Special Agent 15 has included investigation of cases involving violent 16 and non-violent crimes, as well as the use of 17 computers. 18 I have also received training and gained 19 experience in interviewing and interrogation techniques 20 (inaudible) crime scene examination evidence 21 collection, search warrant applications and execution Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 36 1 of searches and seizures and other criminal laws and 2 procedures. 3 Further, I have completed the Department 4 of Defense Cyber courses, introduction to computer 5 hardware, computer incident response course and Windows 6 forensic examination EnCase. 7 Together this afforded me certification 8 as Department of Defense Certified Digital Media 9 Collector and (inaudible) 10 (Inaudible). I review the custody of 11 document and also ensure the description of evidence. 12 I check, for example, recorded serial numbers markings 13 for identification and check the description match the 14 associated evidence. 15 I ensure the proper information such as 16 date and time are properly and accurately recorded. 17 maintain secure custody of the evidence prior to 18 transferring to another evidence. 19 In this particular investigation I 20 assisted with witness interviews and handling of 21 evidence. In so doing I worked with Special Agent Provided by Freedom of the Press Foundation I UNOFFICIAL DRAFT - 6/4/13 Morning Session 37 1 Charles Clapper and Gary Young. 2 On 12 June 2010, I received several 3 pieces of electronic evidence relating to this 4 investigation from the hand of Mr. Adrian Lamo and with 5 his consent. 6 (inaudible) also gave contained law enforcement 7 personnel on two separate CID forms (inaudible) 8 serve electronic devices for all information in any 9 form pertaining to communications which may be in the On 12 June 2010, Agent Adrian Lamo To 10 form of emails, instant message, chats, documents, data 11 computer code or log files, drawings, photographs or 12 any other data, encrypted plain text or any other 13 format relating to PFC Manning and/or the disclosure 14 classified information which is the property of United 15 States Government. 16 The first piece of evidence collected 17 and further handled was Lenovo laptop computer with 18 computer hard drive (inaudible) or DA Form 4137 marked 19 as document number DN76-10 and known as Lamo hard 20 drive. 21 California on 12-June 2010. It was collected from Mr. Lamo in Sacramento, Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 38 1 The second piece of evidence collected 2 and further handled was HP mini-brand computer. 3 number CNU90513VK with a CD computer hard drive, hard 4 drive Serial Number (inaudible) recorded as Item 1 on 5 DA Form 3137 marked as document number DN77-10 and 6 known as Lamo HP hard drive. 7 (inaudible) Sacramento, California, 12 June 2010. 8 Using the DA form I released these 9 Serial It was collected from pieces of evidence to Special Agent Clapper. On 14 10 June, I properly regained possession from Special Agent 11 Clapper before properly leaving them to the evidence 12 custodian Mr. Gary Young on 15 June 2010, which is 13 documented on a DA Form 4137. 14 While in possession of these items I 15 maintained control over them, stored them properly and 16 allowed no one else to access them and did not alter 17 the evidence in any way. 18 I have no reason to believe this 19 evidence was damaged or contaminated in any way. 20 releasing the evidence to Gary Young (inaudible) my 21 knowledge Ii had no further action with the evidence. Provided by Freedom of the Press Foundation After UNOFFICIAL DRAFT - 6/4/13 Morning Session 39 1 Prosecution Exhibit 13 for 2 identification is a Lamo Fujitsu hard drive, Item 1 of 3 DN76-10 Prosecution Exhibit 14 for identification Lamo 4 HP Fujitsu hard drive Item DN7710. 5 6 United States calls Agent Lamo. Whereupon, 7 ADRIAN LAMO, 8 called as a witness, having been first duly sworn to 9 tell the truth, the whole truth, and nothing but the 10 truth, was examined and testified as follows: 11 EXAMINATION BY MR. FEIN 12 BY MR. FEIN: 13 Q. 14 You are Mr. Lamo previously from the Sacramento area of California? 15 A. Yes, I am. 16 Q. Thank you, sir. 17 PFC Manning? 18 A. 19 Mr. Lamo, how do you know From a series of conversations we had online in 2010. 20 Q. When did you first interact with PFC Manning? 21 A. On or about May 20th of 2010. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 40 1 Q. And what was the form of that interaction? 2 A. In a two-way encrypted email from PFC Bradley 3 4 5 6 7 Manning. Q. How did you know that email was from PFC Bradley Manning? A. Based on retrieving return address common to all email. 8 Q. 9 information? 10 A. 11 What do you mean by return address Information indicating where it originated from which allowed the recipient to reply. 12 Q. Is that an email address? 13 A. Yes. 14 Q. What was the email address? 15 A. Bradley.e.manning@gmail.com, military 16 17 18 network. Q. So you received multiple emails from PFC Manning? 19 A. Yes, I did. 20 Q. So the first one he said 21 bradley.e.manning@gmail.com. Can you explain to the Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 41 1 Court what the second email you received, what the name 2 was on the email? 3 A. I'm sorry. 4 Q. The second one. 5 6 7 Which one are you referencing? The one you just mentioned, army email address? A. Yes. A string of letters numbers that identified (Inaudible). 8 Q. Did it have a name as beginning user name? 9 A. Yes. 10 Q. What happened after you received the initial 11 12 His name was presented as user name. email? A. After the initial one I disregarded the 13 email. After receiving several more I wrote back 14 suggesting that the user should perhaps contact me via 15 AOL messenger to have a Xchat. 16 Q. Was this email encrypted or not? 17 A. The one which I sent reply was not, to the 18 best of my recollection. 19 Q. Was the email that was sent to you encrypted? 20 A. Yes, it was. 21 Q. Would you explain to the Court what that Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 42 1 2 means? A. Encryption encodes an email to a particular 3 user rather to a user site affiliate recipient is 4 supposed to be able to read it. 5 Q. What is a cypher? 6 A. In this case public key cypher. 7 Q. What do you mean by public key? 8 A. Series of codes which instruct the computer 9 10 how to encrypt the message in such a way that the recipient will decrypt it. 11 Q. 12 PFC Manning? 13 A. I was not. 14 Q. Why not? 15 A. He had specified an incorrect cipher, one 16 Were you able to read the initial email from which I formerly used but had fallen out of use. 17 Q. How does one find this cypher, this code? 18 A. There are a couple of trailers called 19 (inaudible) servers which contain collections of keys 20 so users can find themselves more easily. 21 Q. And when did you then realize when you Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 43 1 2 started chatting this was PFC Manning? A. There was a particular point in our 3 interactions where PFC Manning mentioned his name was 4 Brad and I replied, oh, I'm an idiot. 5 from the emails. You are that guy 6 Q. And how did you chat with PFC Manning? 7 A. By a service message -- it was online called 8 messenger and through a free third party program. 9 Q. So what program did you use? 10 A. P-I-D-G-I-N. 11 Q. Could you explain briefly -- so the network 12 is being, you used message online instant messaging? 13 A. Yes. 14 Q. You did not online instant message 15 programming? 16 A. 17 No. There were numerous chat lines that support the service but are not made (inaudible) 18 Q. Were these chats encrypted? 19 A. Yes, they were. 20 Q. What does that mean? 21 A. That to a third party intercepting them on Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 44 1 (inaudible) this would be unreadable, the intended 2 party wouldn't be able to receive them. 3 4 5 Q. Mr. Lamo, (inaudible). What is your experience with computers networks? A. I have extensive experience (inaudible) 6 testing that is security of computer networks 7 conducting review of related to security. 8 ways to bypass and improve security. 9 10 Q. And finding And how many years of experience in this field have you worked? 11 A. 15. 12 Q. In those 15 years have you been arrested? 13 A. Yes, I have. 14 Q. Based on that have you been arrested based on 15 activities related to that field? 16 A. Yes, I have. 17 Q. And what for? 18 A. For unlawful access to computer networks at 19 the New York Times Company, Microsoft and Lexis-Nexis. 20 Q. When did this occur? 21 A. The first conduct took place in 2002. Provided by Freedom of the Press Foundation The UNOFFICIAL DRAFT - 6/4/13 Morning Session 45 1 arrest took place in 2003 and the conviction in 2004. 2 Q. So you were convicted? 3 A. Yes, I was. 4 Q. Did you confess to those crimes when you pled 5 guilty? 6 A. Yes, I did. 7 Q. Going back, Mr. Lamo, when did you first 8 I pled guilty. start chatting with PFC Manning? 9 A. On or about May 20th, 2010. 10 Q. How did you know once the chat started that 11 12 it was, in fact, PFC Bradley Manning? A. During the course of the chats I stated to 13 the user, perhaps we could connect on Facebook. 14 we did connect on Facebook, a social networking site 15 with (inaudible) information, one another I ascertained 16 that the name of the user was the same name as the 17 sender of the emails which I previously received. 18 19 20 21 Q. Is this something you do for most individuals that you chat with? A. Once Yes. Facebook is a very popular social network which many people connect. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 46 1 Q. And what were your conclusions based off of 2 your analysis of Facebook and comparing that to the 3 chats? 4 A. Based on the user description of themselves, 5 both in the chats and on Facebook, as well as return 6 email address, I ascertained that I was talking to 7 somebody who (inaudible) Brad Manning, who was 8 associated with the military network (inaudible) same 9 user. 10 11 Q. What was the moniker the user name used in chat between you and PFC Manning? 12 A. I'm sorry. 13 Q. Both. 14 A. Mine was (inaudible) on AOL, (inaudible). 15 16 17 Mine or his? The defendant's was bradass87. Q. Did you only use the Pidgin program to chat for online? 18 A. That is correct. 19 Q. To chat using Pidgin (inaudible) the program? 20 A. I used two different computers. 21 Q. How many computers at the time did you have Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 47 1 access to? 2 A. More than two, fewer than five. 3 Q. Did you only use these two computers that you 4 are referencing to chat with PFC Manning? 5 A. Yes. 6 Q. What were those two computers? 7 A. One was a Lenovo Think Pad. 8 The other was an HP mini- 9 Q. Lenovo Think Pad, is that desktop, laptop? 10 A. It is a laptop made by the successor IBM 11 (inaudible). 12 Q. HP, describe that for the Court? 13 A. It was the netbook, small, Low powered, 14 mostly used online activity. 15 Q. Where did you conduct these chats? 16 A. In the state of various -- at my residence, 17 at Starbucks and at a different Starbucks, Safeway 18 offering access. Internet cafe's and at home. 19 Q. Did you record these chats? 20 A. Yes, I did. 21 Q. Was it your normal practice to record the Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 48 1 2 3 4 5 6 7 chats? A. At that time and possibly still by default recorded all chats. Q. So, yes. So did you activate, I guess, Pidgin, did you affirmatively tell Pidgin to record those chats? A. enabled. No. It's not evident to user that feature is I would have to disable it. 8 Q. You had not done that? 9 A. I had not. 10 Q. You recorded all chats with all people? 11 A. Yes, I did. 12 Q. Did anyone else have access to these 13 14 15 computers at the time you were chatting? A. No. Access is prevented by various countermeasures. 16 Q. What do you mean by that? 17 A. Encryption, password and physical 18 19 20 21 inaccessibility. Q. Let's start with physical inaccessibility. How were they not physically accessible to anyone else? A. In that they were generally on my person. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 49 1 When I went out, I went out usually with one I would 2 talk with. 3 Q. When did the chats first start? 4 A. On or about May 20th of 2010. 5 Q. When did they end? 6 A. On or about May 26th of 2010. 7 Q. You kept them on your person between those 8 9 10 days? A. Computer geeks do not always leave the house much. 11 Q. Did you keep them on yourself? 12 A. Yes, I did. 13 Q. When you went to Starbucks, you had both 14 15 16 17 computers? A. No. As I say, I travel with one to Starbucks and (inaudible). Q. And then what prevented someone in your 18 quarters, or if you were at Starbucks, from accessing 19 the actual information on the computer? 20 21 A. They would require a password in order to access the computer. Then a pass phrase as well in Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 50 1 order to decrypt the drive. 2 Q. 3 phrase? 4 A. At the time only myself. 5 Q. You didn't share that with anyone? 6 A. No. 7 How many people know that password or pass I was the only authorized user and the only one capable of accessing that computer. 8 Q. (Inaudible) 9 A. (inaudible) June 12 of 2010. 10 Q. Who did you meet with? 11 A. Special Agent Toni Edwards. 12 Q. Did Special Agent Edwards collect any 13 evidence from you? 14 A. Yes, he did. 15 Q. What did he collect; what computer? 16 A. He collected a hard drive from the Lenovo 17 18 Think Pad and the HP mini in its entirety. Q. At the time he collected those were both the 19 hard drives that you just spoke about both in working, 20 proper working condition at the time? 21 A. Yes, they were. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 51 1 Q. Did you ever copy, make copies of those chat 2 logs between the time of the chats and giving those 3 computers and computer and hard drive to him? 4 A. Yes, I did. 5 Q. Did you ever manipulate, change, alter, 6 delete, edit the original logs that were on your 7 computers? 8 9 A. The original logs as preserved by Pidgin were no way edited or redacted. 10 Q. You did alter other versions of the logs? 11 A. Yes. 12 Q. What do you mean by "shared"? 13 A. With people in the investigation. 14 Q. You shared these logs at some point? 15 A. Yes. 16 Q. What people did you share the logs with? 17 A. Kevin Poulsen and Ellen Kakashima 18 Q. Those (inaudible) copies of the originals or 19 Ones which I shared. alter copies? 20 A. They were copied with retained redactions. 21 Q. You did not alter the originals? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 52 1 A. I did not. 2 Q. How do you know that you did not alter the 3 4 5 6 originals? A. At no time did I save them or even open them in any way capable of saving them. Q. When you surrendered digital media to Special 7 Agent Edwards, did you sign over that evidence on 8 custody form? 9 A. Yes, I did. 10 Q. Did you sign that form? 11 A. Yes. 12 Q. Did you give Special Agent Edwards any other 13 14 15 16 17 laptops or computer hard drives? A. I gave Special Agent Edwards only the hard drive from the Lenovo and the HP Mini. Q. Now, Mr. Lamo, have you ever been diagnosed with mental health conditions? 18 A. Yes, I have. 19 Q. And what are those? 20 A. Asperger Syndrome, autism, major depression 21 and generalized anxiety. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 53 1 Q. 2 memory? 3 A. No, they do not. 4 Q. Do you take prescribed medications to assist 5 Do those conditions generally affect your And they are not known to. you with living with those conditions? 6 A. Yes, I do. 7 Q. Have those medications ever affected your 8 memory? 9 A. They have, yes. 10 Q. Have you ever used those medications in a 11 manner that could affect your memory? 12 A. Yes. 13 Q. And would your chatting with PFC Manning in 14 2010, were you using those medications in a way that 15 affected your memory? 16 A. I was not. 17 Q. Between the time of your chats in May 2010, 18 and turning over the hard drive and laptop to Special 19 Agent Edwards in 2010, were you using those medications 20 that in any way affected your memory? 21 A. I was not. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 54 1 Q. And today, Mr. Lamo, in this court martial 2 and this testimony, are you suffering from any memory 3 loss either from your diagnosed medical condition or 4 medication use? 5 A. No. 6 MR. FEIN: 7 THE COURT: 8 9 10 No further questions, Your Honor. Defense. EXAMINATION BY MR. COOMBS BY MR. COOMBS: Q. Mr. Lamo, in early 2000, you committed a 11 string of attacks against several large companies, 12 correct? 13 A. A string of offenses, yes. 14 Q. In 2004, you pled guilty to computer fraud? 15 A. Yes, I did. 16 Q. You received a six month sentence, house 17 arrest, two years probation? 18 A. That's correct. 19 Q. You were 22 years old at the time that you 20 pled guilty? 21 A. I was. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 55 1 2 Q. Same age that PFC Manning was when he started the IM chat with you? 3 A. That is also correct. 4 Q. As you said, your IM chats began on or about 5 the 20th of May 2010? 6 A. Yes. 7 Q. And you chatted until on or about the 26th of 8 May 2010? 9 A. That is also correct. 10 Q. Now the day after your initial chat with PFC 11 Manning you contacted law enforcement? 12 A. That's correct. Well, (inaudible). 13 Q. Law enforcement? 14 A. Yes. 15 Q. And you contacted law enforcement because you 16 were concerned about the type of information that PFC 17 Manning had shared with you? 18 A. Yes. 19 Q. You were also concerned for PFC Manning's 20 21 life? A. Yes. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 56 1 2 Q. And after contacting law enforcement you continued to chat with PFC Manning? 3 A. That is correct. 4 Q. And based on your conversations you 5 determined that PFC Manning was young? 6 A. Yes. 7 Q. You believed he was ideologically motivated? 8 A. That was my speculation, yes. 9 Q. You also saw him as well intentioned? 10 A. From his point of view, yes. 11 Q. From your point of view you saw him as well 12 intentioned? 13 A. Subjectively, yes. 14 Q. You also saw him as idealistic? 15 A. Yes, I did. 16 Q. Now you testified on direct that PFC Manning 17 identified himself in the chat conversations. 18 A. Correct. 19 Q. And you testified on direct that he said 20 21 Bradley Manning? A. Yes. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 57 1 2 Q. Now he told you during your conversation that he wanted to disclose this information for public good? 3 A. That was an interpretation, yes. 4 Q. Based on your conversation you saw something 5 very familiar about that? 6 A. Yes. 7 Q. You saw a young 22 year old with good 8 intentions, much like you were? 9 A. That was correct. 10 Q. You did not know PFC Manning, correct? 11 A. Not personally, no. 12 Q. The two of your never met in person? 13 A. No. 14 Q. PFC Manning told you? 15 MR. FEIN: 16 MR. COOMBS: Objection, hearsay. It's not offered for the truth. 17 To explain the conduct at this point. 18 question. 19 before the objection and we'll see what my question is. 20 21 I can ask the I'll caution the witness not to answer THE COURT: Can you (inaudible) to ask the question (inaudible) research on you and the issue. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 58 1 MR. COOMBS: I'm not offering it for the 2 truth. (inaudible) just to explain the nature of this 3 individual's response. 4 5 THE COURT: question. 6 The initial question wasn't that You can ask that question. MR. COOMBS: That was my question. 7 Manning told you he had done some background 8 information on you. 9 PFC got the objection. 10 11 THE COURT: Is that the question you objected to? 12 13 PFC Manning told you and then I MR. FEIN: Yes. That PFC Bradley Manning told -- 14 THE COURT: 15 hearsay. 16 I'm concerned about getting the BY MR. COOMBS: 17 18 Q. (Inaudible) In this instance were you made aware that PFC Manning knew facts about you? 19 A. Yes. 20 Q. And, in fact, you were a supporter of LBGT, 21 correct? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 59 1 A. Yes. 2 Q. LBGT is Lesbian, Gay, Transgender Community? 3 A. Yes. 4 Q. And in 1998, you were appointed to the LBGT 5 (inaudible) task force on the (inaudible) 6 A. That is correct. 7 Q. You also became a volunteer for gay and 8 (inaudible) 9 A. Yes. 10 Q. PFC Manning knew that you were a threat 11 analyst and Gray Hacker. 12 MR. FEIN: 13 MR. COOMBS: 14 MR. FEIN: 15 Is that correct? Objection. Speculation. (inaudible) It's hearsay based on what PFC Manning did or didn't tell him. 16 THE COURT: 17 MR. COOMBS: It is hearsay. (Inaudible) for the conversation 18 not for the truth of the matter. 19 Manning reached out to him and the nature of that 20 conversation. 21 THE COURT: Alright. To explain why PFC (Inaudible) The trial Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 60 1 is before me. 2 ahead. 3 BY MR. COOMBS: 4 5 Q. It's hearsay. I'll disregard it. Go So you knew that he was aware that you were in Gray Hat Hacker, correct? 6 A. Yes. 7 Q. And what is a threat analyst? 8 A. Analyst who involves (inaudible) threats and 9 international threats they are (inaudible) or more. 10 Q. What is a Gray Hat Hacker? 11 A. A hacker is colloquially someone who 12 performs, not always with permission, not for military 13 purposes. 14 15 16 Q. You also were aware that PFC Manning knew that you had donated to WikiLeaks? A. I recall that he referenced that he was aware 17 because I mentioned WikiLeaks in connection with that. 18 I don't know whether he knew I donated. 19 20 21 Q. Essentially that was kind of why PFC Manning was reaching out to you? A. That was one reason, yes. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 61 1 2 Q. Now I want to ask you some specific questions about your conversation with PFC Manning, okay? 3 A. Yes. 4 Q. Your conversation began with PFC Manning, of 5 course, reaching out to you to make contact; is that 6 right? 7 A. Yes. 8 Q. And he told you he was an intelligence 9 analyst? 10 11 THE COURT: this? 12 13 MR. COOMBS: 16 In this instance probably for remainder of my questions the response (Inaudible). 14 15 Again, what is the basis for THE COURT: That exception (inaudible) proceed. MR. COOMBS: (Inaudible) the declarant in 17 this case, the individual to testify about declarant 18 statement then. 19 THE COURT: 20 MR. COOMBS: 21 THE COURT: Existing statement. So that's what I'm going after. Government, what is your Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 62 1 position? 2 MR. FEIN: Can I have a moment, Your Honor. 3 State of mind but (inaudible) answer was for the entire 4 line of questioning. 5 BY MR. COOMBS: 6 Q. He told you he was an intelligence analyst? 7 A. Yes. 8 Q. He said to you, he thought he would reach out 9 to somebody like you who would possibly understand? 10 A. Yes. 11 Q. During this initial chat conversation he told 12 you about his life and his upbringing? 13 A. In some amount of detail, yes. 14 Q. He told you that he was being challenged due 15 to a gender identity issue? 16 A. Yes. 17 Q. He also told you that he had been questioning 18 his gender for years, but started to come to terms with 19 that with his gender during the deployment? 20 A. Yes. 21 Q. He told you he believed he had made a huge Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 63 1 mess? 2 A. Yes, he did. 3 Q. And he confessed that he was emotionally 4 fractured? 5 A. Yes. 6 Q. He said he was talking to you as somebody 7 that needed moral and emotional support? 8 A. Yes. 9 Q. At this point he said he was trying not to 10 end up killing himself? 11 A. That is also correct. 12 Q. He told you that he was feeling desperate and 13 isolated? 14 A. Yes. 15 Q. He described himself as a broken sole? 16 A. Yes, he did. 17 Q. He said his life was falling apart and he 18 didn't have anyone to talk to? 19 A. Yes, he did. 20 Q. And he said he was honestly scared? 21 A. He also said that. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 64 1 2 Q. He told you that he had no one he could trust? 3 A. Correct. 4 Q. And he told you he needed a lot of help? 5 A. Yes, he did. 6 Q. He ended up apologizing to you on several 7 occasions for pouring out his heart to you since you 8 were total strangers? 9 A. Correct. 10 Q. Now at one point he asked you if you had 11 access to classified networks and so on, incredible 12 things, awful things, things that belonged to the 13 public domain, not on some servers dark room in 14 Washington, D.C. 15 asking you that question? What would you do? Do you recall him 16 A. Yes, I did. 17 Q. He told you he thought that the information 18 that he had would have impact on entire world? 19 A. That is also correct. 20 Q. He said the information would disclose 21 casualty figures in Iraq? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 65 1 A. Yes. 2 Q. He believed the State Department, First World 3 Countries exploited the Third World Countries? 4 A. He made that representation, yes. 5 Q. And he told you that the cables detailed what 6 was criminal political fact dealings? 7 A. Yes. 8 Q. He believed that everywhere there was a U.S. 9 post there was a diplomatic scandal? 10 A. That he did. 11 Q. He told you that he believed it was important 12 that the information got out? 13 A. Correct. 14 Q. He thought that if the information got out, 15 it might actually change something? 16 A. Yes. 17 Q. He told you he did not believe in good guys 18 versus bad guys anymore? 19 A. Yes. 20 Q. He only believed in a plethora of states 21 acting in self-interest? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 66 1 A. Correct. 2 Q. He told you he thought he was maybe too 3 idealistic? 4 A. Correct. 5 Q. He told you that he was always a type of 6 person that tried to investigate to find out the truth? 7 A. Something I could appreciate, yes. 8 Q. And based upon what he saw, he told you he 9 could not let information just stay inside? 10 A. Yes. 11 Q. He said he could not separate himself from 12 others? 13 A. Correct. 14 Q. He felt connected to everybody? 15 A. Yes. 16 Q. Even told you it felt like we were all 17 distant family? 18 A. Engagement. 19 Q. And he said he cared? 20 A. Yes. 21 Q. He told you that he thought he would keep Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 67 1 track -- keep track of people that his job impacted? 2 A. Correct. 3 Q. And he wanted to make sure that everybody was 4 okay? 5 A. Yes. 6 Q. He told you that the way he separated himself 7 from other analysts was, he cared about people? 8 A. He said that, yes. 9 Q. PFC Manning told you he followed humanist 10 values? 11 A. Yes, he did. 12 Q. He said he had dogs tags saying "humanist" on 14 A. Yes. 15 Q. Do you know what it means to be a humanist? 16 A. From my understanding the importance of human 13 17 18 it? life and human beings and has a structure of morality. Q. PFC Manning told you that at the time he was 19 feeling (inaudible) and no one seemed to see that or 20 care? 21 A. Yes. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 68 1 2 Q. He told you that he was bothered that nobody seemed to care? 3 A. Yes, he did. 4 Q. He said he thought apathy was far worse than 5 active participation? 6 A. Yes. 7 Q. He told you that he preferred the truth 8 (Inaudible)? 9 A. Yes, he did. 10 Q. He also told you that he was maybe too 11 traumatized to really care about the consequences to 12 him? 13 A. Yes. 14 Q. He told you that he wasn't brave. 15 He was weak? 16 A. Yes. 17 Q. He said he was not so much scared of getting 18 caught and facing consequences as he was of being 19 misunderstood? 20 A. Yes. 21 Q. At one point you asked him what his end game Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 69 1 was, correct? 2 A. Yes, I did. 3 Q. And he told you, hopefully worldwide 4 discussions, debates and reforms? 5 A. Yes, he did. 6 Q. He told you that the reaction to the 7 (Inaudible)? 8 A. Yes. 9 Q. And he said he wanted people to see the 10 truth? 11 A. Correct. 12 Q. He said without information you can't make 13 informed decision as a whole? 14 A. Yes, he did. 15 Q. And he told you to, he was hoping that people 16 would actually change if they saw the information? 17 A. Correct. 18 Q. He also told you that he recognized that he 19 may be just young, naive and stupid? 20 A. Yes. 21 Q. And at one point you asked him why he didn't Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 70 1 just sell the information to Russia or China? 2 A. Correct. 3 Q. And he told you that the information belonged 4 in the public domain? 5 A. Yes, he did. 6 Q. He believed that information was in the 7 public domain and should be for the public good? 8 A. Yes. 9 Q. You asked him how long he had been helping 10 out WikiLeaks at one point? 11 A. Yes, I did. 12 Q. He told you that he essentially had been -- 13 THE COURT: 14 MR. COOMBS: 15 16 Sustained. Hearsay. Very well, Your Honor. BY MR. COOMBS: Q. At one point he told you that his belief or 17 his feelings were that he wanted to eventually go into 18 politics? 19 A. Yes. 20 Q. And at the time he was thinking that humanity 21 could accomplish a lot, if smart people with ideas Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 71 1 cooperated with each other? 2 A. Correct. 3 Q. At anytime did he say he had no loyalty to 4 America? 5 A. Not in those words, no. 6 Q. At anytime did he say the American flag 7 didn't mean anything to him? 8 A. No. 9 Q. At anytime did he say he wanted to help the 10 11 enemy? A. 12 Not in those words, no. MR. FEIN: 13 Thank you. Your Honor. EXAMINATION BY MR. FEIN 14 BY MR. FEIN: 15 Q. Did PFC Manning say he knew Julian Assange? 16 A. Yes, he did. 17 Q. Did PFC Manning disclose he had classified 18 information, downloaded thousands of documents? 19 A. Yes, he did. 20 Q. Also, Mr. Lamo, when did PFC Manning start 21 talking to you, what day was that? Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 72 1 A. On or about May 20th of 2010. 2 Q. That's the end of May 2010? 3 A. Yes. 4 MR. FEIN: Thank you, Mr. Lamo. 5 questions, Your Honor. 6 No further confer? 7 8 THE COURT: Can we have a brief recess to We will not recess. Go ahead and confer. 9 (Pause) 10 THE COURT: 11 excused. 12 Lastly, you are permanently You are free to go or you can stay in the courtroom. 13 THE WITNESS: 14 MR. FEIN: 15 Thank you. United States has multiple stipulations at this point. 16 MR. COOMBS: 17 brief ten-minute comfort break. 18 THE COURT: 19 until 11:15. 20 Your Honor, could we take a Alright. Court is in recess my chambers. 21 Let me see you one moment, both sides, in (Brief Recess) Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 73 1 2 THE COURT: the Court -- there is an additional party. 3 MR. FEIN: 4 THE COURT: 5 Again, the parties are present in Captain Whyte is present. Is the Government ready to proceed? 6 MR. FEIN: We have three stipulations of 7 expected testimony. 8 June 2013 PE27. 9 defense counsel, trial counsel if Special Agent Charles Special agent Charles Clapper, 3 Hereby agreed (inaudible) accused 10 Clapper with present to testify during the merits of 11 presentencing phases of this court martial, testify 12 substantially as follows: 13 I'm a special agent for the U.S. Army 14 Criminal Investigation Division, CCIU. 15 work for the CCIU Investigative Unit, CCIU, current job 16 title special agent in charge (inaudible) of Arizona 17 branch office located in (inaudible) 18 Specifically I As the SAC I run a two-man office that 19 handles exclusively computer crimes. My job also 20 entails serving as CCIU's liaison officer for 21 additionally liaison officer to the regional computer Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 74 1 emergency response team. 2 operation securities center (inaudible). 3 That's another network I have served Arizona Special Agent for 4 five years and I have been the SAC for three of those 5 five years. 6 police officer, MP. 7 of (inaudible) Washington from 1993 to 194. 8 9 1986 to 1999 I was enlisted military I served as investigation section After becoming Agent in (inaudible) 19 from 1999 to 2002 I serves as computer crimes 10 coordinator for the 5th MP, (inaudible). I was also 11 the evidence custodian for the (Inaudible) in 2001 to 12 2002. 13 I served as (inaudible) sergeant in 14 (inaudible) from 2004 to 2006 CCIU or (inaudible), 15 Virginia. 16 performing forensic (inaudible) army computer emergency 17 response team in (inaudible). 18 In 2007 I was (inaudible) contractor Became (inaudible) Arizona in 2008 and 19 currently serve in this capacity. I received bachelors 20 degree (inaudible) located in New York. 21 extensive (inaudible) evidence, handling this includes I have had Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 75 1 (inaudible) course also advanced (inaudible) in assault 2 Special Agent course in Army (inaudible) Georgia. 3 In terms of training I have taken 4 numerous courses at the Defense (inaudible) Maryland. 5 Took these courses between the year 2000 and 2008. 6 They covered a full range of (inaudible) and digital 7 media collection issues. 8 9 Between 2003 and 2006 I attended two courses (inaudible) software Reston, Virginia. This 10 company (inaudible) EnCase. 11 Law Enforcement Training Center, computer network 12 training program in, Georgia. 13 In 2012 I attended Federal These courses all discussed the 14 collection, handling of digital evidence. 15 Department of Cyber Certificate from the DoD which is 16 the highest certification that one can receive in the 17 field. 18 I have the The certification must be renewed every 19 two years. I received my first certification in 2006. 20 (inaudible) Last October 2012. 21 training and certification I worked for 100 cases In addition to my Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 76 1 current duty position in 100 and to 200 cases in my 2 previous capacity. 3 I (inaudible) evidence. Review custody 4 also, then matches evidence attached. 5 (Inaudible). 6 as dates and time are properly recorded. 7 I check for I ensure the appropriate information such Maintain secure custody of evidence 8 prior to transferring it to another individual. In 9 this particular investigation I worked with Special 10 Agent Toni Edwards, assisted with witness interviews 11 and handling evidence. 12 12 June 2010 I received evidence 13 relating to this investigation from Special Agent 14 Edwards. 15 Mr. Lamo on 12 June, 2010, which signing consent to law 16 enforcement personnel to search electronic devices for 17 all information in any form pertaining to 18 communications which made in the form emails, digital 19 messages, documents, data communications made, computer 20 log files (inaudible) any other data, encrypted plain 21 text, any other format relating to Bradley E. Manning I also received to consent Form 87-signed by Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 77 1 on the disclosure of classified information or 2 information which property of the United States 3 Government. 4 The first piece of evidence collected 5 was a Lenovo laptop computer, Fujitsu hard drive, 6 Serial Number K40T812 (inaudible) Item 1, DA Form 7 marked as document number DN 7610 known as (inaudible) 8 hard drive. 9 California, 12 June. 10 It was collected from (inaudible) to The second piece of evidence was HP mini 11 (inaudible) computer CN90513VT with computer, hard 12 drive 51E2K recorded 4137 marked as document DN7710 and 13 known as Lamo HP Fujitsu hard drive. 14 (inaudible) Mr. Lamo 12 June 2010. 15 It was collected As I mentioned, both standard forensic 16 (inaudible) software which is original (inaudible) 17 Original information on hard driver. 18 4137 I properly released the original evidence back to 19 Special Agent Edwards on 14 June 2010. 20 21 Using the DA Form While in possession of these items I maintained control. I returned the item in the same Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 78 1 condition that I received them. 2 believe that the evidence was damaged or contaminated 3 in any way. 4 I have no reason to After releasing the evidence to Special 5 Agent Adrian Edwards, I had no further interaction with 6 this evidence. 7 Stipulation expected Gary Young, dated 8 the 3, June 2013 PE28. 9 counsel were present to testify presentencing phases of 10 Hereby (inaudible) agreed trial this court martial he would as follows: 11 I am currently criminal intelligence 12 Program Manager CCIU. 13 CCIU for 10 years. 14 Of the CID. I have been with This position primarily entails 15 reviewing cases for entering them into database. 16 Reports (inaudible) alternative evidence custodian. 17 Alternate evidence custodian. 18 10 years. 19 I held this position for Associates degree, Central Texas 20 College. Military 1980. 21 investigator. '87 I became military police From 1989 to 1992 (inaudible) of Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 79 1 investigation in Germany. 2 1991 I was also the evidence custodian. 3 During this time 1989 to I joined CID in (inaudible) from 1994 to 4 1995 I was the alternate evidence custodian while 5 (inaudible) in career. 6 senior enlisted advisor primary evidence custodian. 7 From 1998 until I retired in 2000, I From 1995 to 1998 (inaudible) 8 worked CID headquarters on (inaudible). After three 9 years working for 2003, I returned to the criminal 10 investigation by joining (inaudible). 11 my current since then serving from 2003 to 2006 12 situational awareness alternate occasionally primary 13 items custodian at various times. 14 I have worked in Throughout my years in law enforcement I 15 have worked more than 800 cases. 16 medical (inaudible) investigation training by the Armed 17 Forces Institute pathology held at Fort Lewis. 18 In 1996 I took the In 2005 I attended evidence management 19 course the United States Army Crime Lab in Georgia. 20 2007 I returned to (inaudible) lab Special Agent 21 laboratory training. Provided by Freedom of the Press Foundation In UNOFFICIAL DRAFT - 6/4/13 Morning Session 80 1 These courses do cover physical and 2 digital (inaudible). I followed several handling 3 evidence as evidence custodian. 4 piece of evidence, I checked (inaudible) evidence 5 custody document to make sure the evidence matches the 6 description and that the marked for identification 7 number on the evidence matches what is recorded on the 8 form. First time I receive a 9 I also check to make sure the form has 10 been appropriately filled out and I sign the evidence 11 into the evidence room. 12 I then walk it into the evidence bought database before 13 placing it in the evidence room. 14 I sign in the receipt column. When someone asks to receive a stored 15 piece of evidence, I pull voucher number and locate the 16 evidence in its appropriate location. 17 sure the evidence I am handling matches the description 18 on the form and release it to the special agent for 19 (inaudible) that is requested it. 20 21 I check to make I sign that I have released it and the individual receiving it signs that he, that she has Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 81 1 received it. 2 of evidence, I check the description, make sure the 3 evidence being transferred matches the forms used to 4 transfer. 5 worked with Special Agent (inaudible) and (inaudible) It in my capacity as evidence custodian, I 6 7 (inaudible). It's normal for her to sign evidence room for me to sign it back in. 8 9 Each time I relinquish or assume custody I am involved in the present case because my role in assisting the investigation team 10 with the secure storage evidence they collected I have 11 received evidence from Special Agent Edwards and 12 (inaudible). 13 15 June 2010 I received evidence related 14 to this investigation from Special Agent Edwards. 15 took custody of Lenovo laptop computer, Fujitsu hard 16 drive, Serial Number (inaudible). 17 Lamo while Sacramento, California, 1 June 2010. 18 Recorded time D4137 marked as document 76-10 and known 19 as Lamo hard drive. 20 21 I Collected from Mr. I also took HP mini computer, number (inaudible) CN90513VT with HP computer hard drive, Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 82 1 Serial Number (inaudible) collected from Mr. Lamo in 2 Sacramento, California 12 June, 2010. 3 (inaudible) Upon taking possession I logged it into 4 the evidence using proper procedures. I never logged 5 it back out. 6 to this investigation (inaudible) I took custody of 7 (inaudible) VD marked (inaudible) 8 0028-102CID221-10117DEPT of state server log, 9 199.56.188.73. 15 June 2010 (inaudible) evidence related Seized on 15 June 2010. Recorded time 10 DA form marked as DN78-10 known as DOS serve logs. 11 Taking possession I walked into the 12 evidence room, using proper procedures I described 13 earlier. 14 I never logged it back out. Your Honor, stipulation of expected 15 testimony from (inaudible) Marina, 3 June, 2013, 16 Prosecution Exhibit 29. 17 (inaudible) were present to testify during merits 18 phases court martial, would testify essentially as 19 follows: 20 21 It is hereby agreed by the I am the primary evidence custodian of the (inaudible) Investigation CID Quantico, Virginia. Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 83 1 I have held this position since 2006. In this position 2 I track and catalog evidence maintained by CCIU office. 3 I have been certified evidence custodian 4 since January of 2006. 5 from U.S. Army Criminal Investigation Laboratory since 6 January 2010. 7 investigation training academy certified digital media 8 collector. 9 I received this certification I have also (inaudible) defense I follow general procedures. The first 10 evidence I check the accompanying (inaudible) 47 11 custody document to make sure it matches the 12 description and the marked for identification over 13 evidence matches what is recorded on the form. 14 I also check to make sure the form has 15 been properly filled out. 16 evidence room. 17 it into evidence book and database before preserving it 18 into the evidence room. 19 I sign the evidence to the I sign in the receipt column item log After receiving stored piece I pull 20 voucher number, locate the evidence in the appropriate 21 location. I check to make sure the evidence I'm Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 84 1 handing over matches the description on the form, 2 release it to the special agent, referring to the 3 examiner who has requested it. 4 I sign that I have released it and the 5 individual receiving it signs that he or she has 6 received it. 7 evidence I check the description to make sure the 8 evidence being transferred matches the form used to 9 transfer it. 10 Each time relinquish or assume custody of I first became involved in the present 11 case because of my role in assisting the investigation 12 team. 13 investigation agent and further (inaudible) into the 14 evidence room and release back to them when they needed 15 it for their investigation or examination. I signed several piece evidence from the 16 In my role as evidence custodian I 17 worked with and receive evidence from Special Agent 18 Kirk Ellis, Special Agent Edwards, Davis Shaver, 19 Special Agent (inaudible), Special Agent John 20 (inaudible). 21 the primary evidence custodian when I began working for I also know Gary Young. He used to be Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 85 1 Army CCIU. Mr. Young currently serves as (inaudible). 2 In June 2010, one Lenovo laptop computer 3 with (inaudible) hard drive, Serial Number (inaudible) 4 K4014 (Inaudible) collected from (inaudible) on 12 5 June, 2010, recorded as time one DA form 4137 marked as 6 Document Number DN76-10 and known as (inaudible) hard 7 drive. 8 9 Referring to (inaudible) for examination. I also sign out HP mini (inaudible) CID 10 hard drive, Serial Number 5 (inaudible) collected from 11 (inaudible on 12 June (inaudible) DA form 4137 marked 12 as DN77-10 known as (inaudible) HP hard drive to 13 Special Agent Shaver for the same reason. 14 Returned these items that same day. 15 received release evidence according to the proper 16 procedures I just described. 17 I evidence in any way. 18 I did not alter this On (inaudible) 10 related to 19 investigation from Special Agent Wilbur recorded in 20 Item 1 DA (inaudible) 4137 marked DN15. 21 WikiLeaks (inaudible), 13 October 10 (inaudible) from CD marked Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 86 1 Upon receiving this evidence I properly 2 logged it into the evidence room using the same 3 procedures described earlier. 4 temporarily released it to Shaver for examination. 5 returned it later that same day. 6 released evidence (inaudible) described earlier. 7 not alter this evidence in any way. November 2010 He I (inaudible) I did 8 On 3 November 2010, I received 19 pieces 9 of evidence from (inaudible), 2 November, 2010 recorded 10 Items 1 through 19 on DA Form, Form 4137 marked as 11 DN162-10. 12 13 Item 2 on this DA form, Form 4137 was SD memory card Serial Number (inaudible) SD card. 14 On 10 December 2010, I released SD card 15 to Special Agent Shaver for examination. 16 it later that same day. 17 evidence back into the evidence room according to the 18 proper procedures I described earlier. 19 this evidence in any way. 20 21 He returned I appropriately received the I did not alter That's the end of the three stipulations of testimony. And United States will move to admit Provided by Freedom of the Press Foundation UNOFFICIAL DRAFT - 6/4/13 Morning Session 87 1 what has been marked as Prosecution Exhibits 13 and 14 2 for identification as Prosecution Exhibit 13 and 14 3 respectively. 4 (Pause) 5 MR. FEIN: United States requests a lunch 6 recess a little earlier, requesting two-hour lunch 7 recess in order for the parties to work on 8 administrative issue. 9 MR. COOMBS: 10 11 12 13 14 THE COURT: 1345. No objection, Your Honor. Alright. We'll come back at That will be 1:35 in civilian parlance. THE COURT: civilian parlance. 45. I'm sorry. 1345 or 1:45 in Court is recessed until 1:45. (The trial recessed at 11:40 a.m.) 15 16 17 18 19 20 21 Provided by Freedom of the Press Foundation United States vs. PFC Bradley E. Manning A ability (1) 12:8 able (5) 13:16;25:4;42:4,11;44:2 academy (1) 83:7 Accept (1) 8:17 access (9) 13:13;38:16;44:18;47:1, 18;48:12,14;49:21;64:11 accessible (1) 48:20 accessing (2) 49:18;50:7 accompanying (1) 83:10 accomplish (1) 70:21 according (2) 85:15;86:17 account (1) 5:3 accuracy (1) 21:5 accurate (1) 21:11 accurately (2) 26:12;36:16 accused (1) 73:8 acting (1) 65:21 action (1) 38:21 activate (1) 48:4 active (1) 68:5 activities (1) 44:15 activity (2) 33:19;47:14 actual (2) 23:4;49:19 actually (5) 8:4;22:5;32:6;65:15; 69:16 addition (2) 35:3;75:20 additional (1) 73:2 additionally (1) 73:21 address (7) 5:6;40:6,8,12,14;41:5; 46:6 administrative (1) 87:8 admit (2) Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session 26:20;86:21 admitted (1) 35:7 Adrian (4) 37:4,5;39:7;78:5 advanced (1) 75:1 advantage (1) 10:15 advisor (1) 79:6 Advocate (1) 35:5 affect (2) 53:1,11 affected (3) 53:7,15,20 affiliate (1) 42:3 affirmatively (1) 48:5 afforded (1) 36:7 Again (5) 12:21;13:17;16:11;61:10; 73:1 against (2) 33:19;54:11 age (1) 55:1 Agent (63) 5:17,20;6:3,5,12,14;7:18; 8:17;9:1;14:6;15:6;16:17; 19:4,7,8,9,13;23:7,16; 32:20;33:1,6,12;34:1,12; 35:4,14;36:21;37:5;38:9, 10;39:5;50:11,12;52:7,12, 14;53:19;73:7,9,13,16;74:3, 8;75:2;76:10,13;77:19; 78:5;79:20;80:18;81:5,11, 14;84:2,13,17,18,19,19; 85:13,19;86:15 agree (1) 14:14 agreed (4) 32:21;73:8;78:8;82:16 ahead (2) 60:2;72:7 AI (1) 21:1 Allocate (2) 12:11,15 allocated (5) 12:10,12,12;26:19;27:7 allow (1) 12:16 allowed (3) 12:7;38:16;40:11 alone (1) 21:13 Alright (6) 12:10;14:8;32:14;59:21; 72:18;87:10 alter (9) 38:16;51:5,10,19,21; 52:2;85:16;86:7,18 altering (1) 12:8 Alternate (3) 78:17;79:4,12 alternative (1) 78:16 always (5) 13:16;21:14;49:9;60:12; 66:5 America (2) 30:17;71:4 American (1) 71:6 amount (1) 62:13 analysis (1) 46:2 analyst (5) 59:11;60:7,8;61:9;62:6 analysts (1) 67:7 and/or (1) 37:13 annual (2) 9:19,20 anxiety (1) 52:21 anymore (1) 65:18 AOL (2) 41:15;46:14 apart (1) 63:17 apathy (1) 68:4 apologizing (1) 64:6 appear (1) 26:16 Apple (1) 22:18 applications (1) 35:21 appointed (1) 59:4 appreciate (1) 66:7 appropriate (3) 76:5;80:16;83:20 appropriately (2) 80:10;86:16 Approximately (1) 16:16 area (1) 39:14 Arizona (3) 73:16;74:3,18 Armed (1) 79:16 Army (13) Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 7:1,6;15:19,20;33:19; 34:4;41:5;73:13;74:16; 75:2;79:19;83:5;85:1 arrangement (1) 21:3 arrest (2) 45:1;54:17 arrested (2) 44:12,14 articles (1) 9:11 arts (1) 35:9 ascertained (2) 45:15;46:6 Asperger (1) 52:20 Assange (1) 71:15 assault (1) 75:1 assigned (2) 16:20;21:12 assist (1) 53:4 assisted (2) 36:20;76:10 assisting (2) 81:9;84:11 associated (3) 22:8;36:14;46:8 Associates (1) 78:19 assume (2) 81:1;84:6 Atlanta (1) 33:8 attached (1) 76:4 attacks (1) 54:11 attended (4) 9:16;75:8,10;79:18 August (2) 34:16,16 authorized (1) 50:6 autism (1) 52:20 award (2) 10:2,5 awards (1) 9:21 aware (4) 58:17;60:4,14,16 awareness (2) 33:21;79:12 awful (1) 64:12 B Bachelors (2) (88) ability - Bachelors UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning 35:9;74:19 back (12) 7:6;23:20;32:6;41:13; 45:7;77:18;81:7;82:5,13; 84:14;86:17;87:10 Background (2) 8:13;58:7 bad (1) 65:18 Bar (1) 35:8 Based (9) 40:6;44:14,14;46:1,4; 56:4;57:4;59:14;66:8 basically (2) 11:21;13:10 basis (2) 19:17;61:10 became (5) 7:7;59:7;74:18;78:20; 84:10 become (1) 17:1 becoming (2) 6:12;74:8 began (3) 55:4;61:4;84:21 begin (1) 7:1 beginning (1) 41:8 behind (1) 21:10 beings (1) 67:17 belief (1) 70:16 belong (1) 29:13 belonged (2) 64:12;70:3 Belvoir (1) 33:14 best (1) 41:18 bit (2) 11:3,4 book (5) 13:1,3,12,14;83:17 both (8) 12:1;46:5,13;49:13; 50:18,19;72:19;77:15 bothered (1) 68:1 bought (1) 80:12 Brad (2) 43:4;46:7 bradass87 (1) 46:15 Bradley (6) 40:2,5;45:11;56:20; 58:12;76:21 Min-U-Script(R) Bradleyemanning@gmailcom (2) 40:15,21 branch (4) 6:15;16:5,13;73:17 brave (1) 68:14 break (1) 72:17 Brief (4) 32:16;72:5,17,21 briefly (1) 43:11 broken (1) 63:15 Brought (1) 23:20 Bureau (1) 34:12 bypass (1) 44:8 byte (1) 11:5 C cables (1) 65:5 cafe's (1) 47:18 California (7) 12:4;37:21;38:7;39:14; 77:9;81:17;82:2 Call (1) 15:9 called (7) 5:2,12;11:3;15:14;39:8; 42:18;43:7 callid (1) 22:4 calls (2) 15:11;39:5 came (2) 7:6;23:16 Can (16) 7:3;10:13;11:19;18:10; 21:15;22:1;29:5;40:21; 42:20;57:17,20;58:5;62:2; 72:5,11;75:16 capable (2) 50:7;52:5 capacity (4) 33:16;74:19;76:2;81:4 Captain (2) 5:5;73:3 card (4) 13:11;86:13,13,14 care (3) 67:20;68:2,11 cared (2) 66:19;67:7 career (1) 79:5 case (16) 10:10;21:17,18;22:8,9; 23:1,5,16;25:11;29:17; 30:3;32:4;42:6;61:17;81:8; 84:11 cases (6) 21:16;35:15;75:21;76:1; 78:15;79:15 casualty (1) 64:21 catalog (3) 13:2,11;83:2 caught (1) 68:18 caution (1) 57:18 CCID (1) 21:2 CCII (1) 6:19 CCISP (2) 18:9,10 CCIU (23) 6:19;7:1,5,7,9;16:2,4,5, 12,13;17:2,5,13;33:14; 34:10;73:14,15,15;74:14; 78:12,13;83:2;85:1 CCIU's (1) 73:20 CD (2) 38:3;85:20 cell (2) 9:3,3 center (4) 9:9;34:21;74:2;75:11 Central (1) 78:19 certain (1) 13:1 certainly (1) 31:2 Certificate (1) 75:15 certification (8) 18:11,14;36:7;75:16,18, 19,21;83:4 certifications (4) 9:5;17:19;18:5,7 Certified (6) 9:9;18:2,8;36:8;83:3,7 challenged (1) 62:14 chambers (1) 72:20 change (3) 51:5;65:15;69:16 chapter (1) 9:15 charge (4) 6:14;7:19;19:8;73:16 Charles (3) 37:1;73:7,9 chat (14) 43:6,16;45:10,19;46:11, Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 16,19;47:4;51:1;55:2,10; 56:2,17;62:11 chats (15) 37:10;43:18;45:12;46:3, 5;47:15,19;48:1,3,5,10; 49:3;51:2;53:17;55:4 chatted (1) 55:7 chatting (4) 43:1;45:8;48:13;53:13 check (10) 36:12,13;76:4;80:9,16; 81:2;83:10,14,21;84:7 checked (2) 23:19;80:4 Chief (1) 10:4 China (1) 70:1 CI (1) 33:13 CID (6) 37:7;78:12;79:3,8;82:21; 85:9 CIDC (1) 33:21 cipher (1) 42:15 civilian (2) 87:11,13 Clapper (5) 37:1;38:9,11;73:7,10 classified (4) 37:14;64:11;71:17;77:1 client (1) 31:13 clone (1) 28:5 closet (1) 22:4 CN90513VT (2) 77:11;81:21 CNU90513VK (1) 38:3 Code (3) 34:2;37:11;42:17 codes (1) 42:8 collaborative (2) 21:17;22:1 collect (2) 50:12,15 collected (17) 23:6,11;24:4;37:16,20; 38:1,6;50:16,18;77:4,8,13; 81:10,16;82:1;85:4,10 collecting (1) 23:7 collection (6) 24:8;34:19;35:2,21;75:7, 14 collections (1) 42:19 (89) back - collections United States vs. PFC Bradley E. Manning Collector (2) 36:9;83:8 College (1) 78:20 colloquially (1) 60:11 Columbia (1) 35:5 column (2) 80:11;83:16 comfort (1) 72:17 committed (1) 54:10 common (1) 40:6 communication (1) 17:12 communications (3) 37:9;76:18,19 Community (1) 59:2 companies (2) 34:9;54:11 company (3) 12:4;44:19;75:10 comparable (1) 34:3 compare (2) 24:6,7 comparing (1) 46:2 completed (1) 36:3 complicated (1) 21:18 Computer (56) 6:15,17,20;8:18;9:3,12; 10:12,13,15,17,19;11:16; 12:21;13:4,15,17;14:6; 15:19;18:20;23:3;29:3; 33:13,17,18;34:7;36:4,5; 37:11,17,18;38:2,3;42:8; 44:6,18;49:9,19,21;50:7,15; 51:3;52:13;54:14;73:19,21; 74:9,16;75:11;76:19;77:5, 11,11;81:15,20,21;85:2 computers (13) 10:7,21;17:10;35:17; 44:4;46:20,21;47:3,6; 48:13;49:14;51:3,7 concerned (3) 55:16,19;58:14 concerning (2) 8:3;9:15 conclusions (1) 46:1 condition (3) 50:20;54:3;78:1 conditions (3) 52:17;53:1,5 conduct (3) 44:21;47:15;57:17 Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session conducted (1) 34:5 conducting (1) 44:7 confer (2) 72:6,8 Conference (2) 9:19,20 conferences (2) 9:16,18 confess (1) 45:4 confessed (1) 63:3 connect (3) 45:13,14,21 connected (2) 23:3;66:14 connection (1) 60:17 consent (3) 37:5;76:14,15 consequences (2) 68:11,18 considered (1) 10:12 contact (3) 30:9;41:14;61:5 contacted (2) 55:11,15 contacting (1) 56:1 contain (1) 42:19 contained (2) 23:2;37:6 container (1) 23:2 contains (1) 25:8 contaminated (2) 38:19;78:2 contents (2) 26:1,10 Continue (1) 11:6 continued (1) 56:2 contract (3) 16:20;17:1,5 contractor (1) 74:15 contribute (1) 10:3 control (2) 38:15;77:21 conversation (7) 57:1,4;59:17,20;61:2,4; 62:11 conversations (3) 39:18;56:4,17 convert (1) 10:11 convicted (1) 45:2 conviction (1) 45:1 COOMBS (18) 5:8;54:8,9;57:16;58:1,6, 16;59:13,17;60:3;61:12,16, 20;62:5;70:14,15;72:16; 87:9 cooperated (1) 71:1 coordinator (1) 74:10 copied (3) 11:7;23:21;51:20 copies (3) 51:1,18,19 copy (2) 24:4;51:1 corporate (1) 12:2 counsel (7) 5:3;15:8;33:1,1;73:9,9; 78:9 counter (1) 7:20 countermeasures (1) 48:15 Countries (2) 65:3,3 County (2) 34:15,17 couple (1) 42:18 course (6) 36:5;45:12;61:5;75:1,2; 79:19 courses (6) 36:4;75:4,5,9,13;80:1 COURT (45) 5:2,2,6;8:16,20;14:8; 15:4,6;16:6;18:16;19:1; 32:8,10,14,17;33:3;41:1,21; 47:12;54:1,7;57:20;58:4,10, 14;59:16,21;61:10,14,19, 21;70:13;72:7,10,18,18; 73:1,2,4,11;78:10;82:18; 87:10,12,13 courtroom (1) 72:12 cover (1) 80:1 covered (2) 21:10;75:6 covers (1) 18:12 create (2) 12:5,12 created (3) 25:4,7,18 Crime (5) 6:15,17;33:14;35:20; 79:19 Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 crimes (5) 34:1;35:16;45:4;73:19; 74:9 criminal (11) 9:9;10:6;15:20;33:13; 34:21;36:1;65:6;73:14; 78:11;79:9;83:5 criminology (1) 8:12 current (4) 16:1;73:15;76:1;79:11 currently (6) 17:18;35:4,12;74:19; 78:11;85:1 custodian (14) 38:12;74:11;78:16,17; 79:2,4,6,13;80:3;81:4; 82:20;83:3;84:16,21 custody (11) 36:10,17;52:8;76:3,7; 80:5;81:1,15;82:6;83:11; 84:6 CV (2) 8:13,13 Cyber (2) 36:4;75:15 cypher (3) 42:5,6,17 D D4137 (1) 81:18 DA (12) 37:18;38:5,8,13;77:6,17; 82:10;85:5,11,20;86:10,12 damaged (2) 38:19;78:2 dark (1) 64:13 data (8) 13:15;25:11,11,13;37:10, 12;76:19,20 database (3) 78:15;80:12;83:17 date (2) 25:8;36:16 dated (1) 78:7 dates (1) 76:6 Dave (1) 5:17 David (3) 5:8,9,11 Davis (1) 84:18 day (6) 20:3;55:10;71:21;85:14; 86:5,16 days (1) 49:8 DC (1) (90) Collector - DC United States vs. PFC Bradley E. Manning 64:14 DC3 (2) 9:10;18:2 dealings (1) 65:6 debates (1) 69:4 December (1) 86:14 decision (1) 69:13 declarant (2) 61:16,17 decrypt (2) 42:10;50:1 default (1) 48:2 defendant's (1) 46:15 defense (10) 9:9,19;33:1;34:4;36:4,8; 54:7;73:9;75:4;83:6 degree (2) 74:20;78:19 delete (2) 13:9;51:6 deleted (3) 12:13,17;14:4 Department (9) 6:13;9:19;33:7;34:4,18; 36:3,8;65:2;75:15 depends (1) 20:18 depict (1) 26:12 deployment (1) 62:19 depression (1) 52:20 deputy (3) 34:14,17,18 describe (3) 7:3;11:19;47:12 described (6) 63:15;82:12;85:16;86:3, 6,18 description (9) 36:11,13;46:4;80:6,17; 81:2;83:12;84:1,7 desktop (2) 10:17;47:9 desktops (1) 10:18 desperate (1) 63:12 destinations (1) 33:10 detail (2) 20:8;62:13 detailed (1) 65:5 details (1) 19:15 Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session determine (3) 10:8;25:4,6 determined (1) 56:5 device (1) 17:11 devices (2) 37:8;76:16 diagnosed (2) 52:16;54:3 different (3) 29:4;46:20;47:17 digital (24) 6:6;8:3,14,15;9:1,2; 11:12;16:3,5,14;17:7,8,19; 18:3;21:12,20;22:8;36:8; 52:6;75:6,14;76:18;80:2; 83:7 diplomatic (1) 65:9 direct (3) 30:8;56:16,19 directed (1) 33:19 directly (1) 7:16 disable (1) 48:7 disclose (3) 57:2;64:20;71:17 disclosure (2) 37:13;77:1 discover (1) 31:17 discovered (1) 31:20 discussed (1) 75:13 discussions (1) 69:4 disk (1) 26:13 disregard (1) 60:1 disregarded (1) 41:12 distant (1) 66:17 District (1) 35:5 Division (1) 73:14 DN (1) 77:7 DN15 (1) 85:20 DN162-10 (1) 86:11 DN76-10 (3) 37:19;39:3;85:6 DN7710 (2) 39:4;77:12 DN77-10 (2) - Vol. 2 June 4, 2013 38:5;85:12 DN78-10 (1) 82:10 doctorate (2) 35:6,10 document (15) 14:16;15:2;19:20;26:7, 12;27:20;36:11;37:19;38:5; 77:7,12;80:5;81:18;83:11; 85:6 documentation (1) 24:8 documented (1) 38:13 documents (3) 37:10;71:18;76:19 DoD (1) 75:15 dogs (1) 67:12 domain (3) 64:13;70:4,7 domains (1) 18:12 donated (2) 60:15,18 done (2) 48:8;58:7 DOS (1) 82:10 down (1) 13:6 download (1) 14:3 downloaded (1) 71:18 drawings (1) 37:11 drive (45) 12:13;13:7;22:13,16,16, 20,21;23:2,4,14,18;24:10, 14;25:1;26:13;29:4,19,21; 30:1,12,18,21;37:18,20; 38:3,4,6;39:2,4;50:1,16; 51:3;52:15;53:18;77:5,8,12, 13;81:16,19,21;85:3,7,10, 12 driver (1) 77:17 drives (2) 50:19;52:13 due (1) 62:14 duly (3) 5:12;15:14;39:8 during (10) 24:5,13;33:2;45:12;57:1; 62:11,19;73:10;79:1;82:17 duty (1) 76:1 E Provided by Freedom of the Press Foundation earlier (5) 82:13;86:3,6,18;87:6 early (2) 7:6;54:10 easily (1) 42:20 edit (1) 51:6 edited (1) 51:9 education (1) 8:7 Edwards (16) 32:19,20;33:2;50:11,12; 52:7,12,14;53:19;76:10,14; 77:19;78:5;81:11,14;84:18 either (4) 11:3;20:16,17;54:3 electronic (3) 37:3,8;76:16 Electronics (1) 9:2 Ellen (1) 51:17 Ellis (1) 84:18 else (5) 13:19;30:11;38:16;48:12, 20 email (15) 40:2,4,7,12,14;41:1,2,5, 11,13,16,19;42:2,11;46:6 Emails (6) 29:7;37:10;40:17;43:5; 45:17;76:18 embedded (1) 24:6 emergency (2) 74:1,16 emotional (1) 63:7 emotionally (1) 63:3 employed (4) 33:6,12;34:11;35:3 employee (2) 16:20;17:1 empowered (1) 33:8 enabled (1) 48:7 EnCase (15) 11:9,10,19,20,21;12:3,5, 16;24:1,4;25:3,13,15;36:6; 75:10 encodes (1) 42:2 encrypt (1) 42:9 encrypted (6) 37:12;40:2;41:16,19; 43:18;76:20 Encryption (2) (91) DC3 - Encryption UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning 42:2;48:17 end (5) 49:5;63:10;68:21;72:2; 86:20 ended (1) 64:6 enemy (1) 71:10 Enforcement (11) 34:13,21;35:14;37:6; 55:11,13,15;56:1;75:11; 76:16;79:14 Engagement (1) 66:18 enlisted (3) 7:5;74:5;79:6 ensure (3) 36:11,15;76:5 entails (2) 73:20;78:14 entering (1) 78:15 entire (2) 62:3;64:18 entirety (1) 50:17 entities (1) 12:2 entry (1) 13:10 erases (1) 13:17 essentially (4) 25:14;60:19;70:12;82:18 even (2) 52:4;66:16 eventually (1) 70:17 everybody (2) 66:14;67:3 everywhere (1) 65:8 evidence (102) 7:20;10:3;19:16;21:21; 22:12,15;23:19,19;24:3,7; 26:21;31:12;34:19;35:2,20; 36:11,14,17,18,21;37:3,16; 38:1,9,11,17,19,20,21; 50:13;52:7;74:11,21;75:14; 76:3,4,7,11,12;77:4,10,18; 78:2,4,6,16,17;79:2,4,6,18; 80:3,3,4,4,5,7,10,11,12,13, 15,16,17;81:2,3,4,7,10,11, 13;82:4,5,12,20;83:2,3,10, 13,15,16,17,18,20,21;84:7, 8,12,14,16,17,21;85:15,17; 86:1,2,6,7,9,17,17,19 evident (1) 48:6 exact (1) 11:14 EXAMINATION (24) 5:15;8:14;14:9,16;15:17; Min-U-Script(R) 17:8;19:19;20:1,2,19;23:20, 21;24:5,13;28:12;35:20; 36:6;39:11;54:8;71:13; 84:15;85:9;86:4,15 examine (4) 10:7;12:5;22:8;23:4 examined (4) 5:14;15:16;24:11;39:10 Examiner (3) 16:3;17:7;84:3 examiners (2) 7:17;21:9 examining (2) 11:16;23:17 example (1) 36:12 exams (1) 20:9 exception (2) 5:4;61:14 exclusively (1) 73:19 excused (3) 15:7;32:11;72:11 execution (2) 34:8;35:21 Exhibit (12) 26:4,6,20;27:13,14,18; 28:10;32:21;39:1,3;82:16; 87:2 Exhibits (1) 87:1 existed (1) 12:17 Existing (1) 61:19 expected (3) 73:7;78:7;82:14 experience (5) 35:13,19;44:4,5,9 expert (3) 8:17;14:6;18:20 Explain (12) 6:10;12:20;18:10;21:15; 22:1;25:14;40:21;41:21; 43:11;57:17;58:2;59:18 exploited (1) 65:3 expressed (1) 30:17 extensive (2) 44:5;74:21 external (14) 22:12,16,19,20,21,21; 23:4,13,18;24:10,13,21; 26:13;30:1 F Facebook (5) 45:13,14,20;46:2,5 facing (1) 68:18 fact (3) 45:11;58:20;65:6 facts (1) 58:18 fair (1) 28:18 fallen (1) 42:16 falling (1) 63:17 familiar (1) 57:5 family (1) 66:17 far (1) 68:4 feature (1) 48:6 Federal (3) 34:3,20;75:10 feeling (2) 63:12;67:19 feelings (1) 70:17 FEIN (17) 32:19;39:11,12;54:6; 57:15;58:12;59:12,14;62:2; 71:12,13,14;72:4,14;73:3,6; 87:5 felt (2) 66:14,16 fewer (1) 47:2 Field (4) 33:8;44:10,15;75:17 figures (1) 64:21 file (28) 13:6,6,7,9,10,16,16,17,18, 21;14:2;24:3,7,19,21;25:4, 6,8,12,17,21;26:1,10,13,15, 18;27:7,8 files (9) 12:7,11,13,17,17;14:4; 29:11;37:11;76:20 filled (2) 80:10;83:15 find (8) 13:1;15:1;24:14;30:11; 31:7;42:17,20;66:6 finding (1) 44:7 findings (2) 8:6;21:11 fine (1) 8:20 fingerprint (1) 11:12 first (19) 5:12;9:8;10:12;11:5; 15:14;23:18;37:16;39:8,20; 40:20;44:21;45:7;49:3; 65:2;75:19;77:4;80:3;83:9; Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 84:10 five (4) 7:16;47:2;74:4,5 flag (1) 71:6 Florida (1) 35:10 focus (2) 6:19,19 folder (1) 12:12 follow (1) 83:9 followed (2) 67:9;80:2 following (1) 33:4 follows (6) 5:14;15:16;39:10;73:12; 78:10;82:19 force (1) 59:5 Forces (1) 79:17 Forensic (21) 7:20;8:4;10:3,11,20,21; 11:4,4,8;14:14,15;15:19; 17:7;19:14;22:12,15;28:17, 18;36:6;74:16;77:15 forensics (4) 8:18;9:12;14:7;18:20 form (29) 28:7;37:9,10,18;38:5,8, 13;40:1;52:8,10;76:14,17, 18;77:6,17;80:8,9,18;82:10; 83:13,14;84:1,8;85:5,11; 86:10,10,12,12 formal (3) 8:7;19:19;20:15 format (6) 6:8;12:8;21:2;25:16; 37:13;76:21 formerly (1) 42:16 forms (2) 37:7;81:3 Fort (1) 79:17 found (11) 24:17,19;25:21;26:13,15, 18;27:3;30:8,9;31:9,21 foundation (2) 18:16;21:10 fractured (1) 63:4 fraud (1) 54:14 Frederick (1) 19:4 free (5) 13:18,19;27:11;43:8; 72:11 Ft (1) (92) end - Ft UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning 33:14 Fujitsu (5) 39:2,4;77:5,13;81:15 full (2) 13:16;75:6 funds (1) 31:19 further (13) 15:3;20:20;28:11;32:6; 34:20;36:3;37:17;38:2,21; 54:6;72:4;78:5;84:13 G gained (1) 35:18 game (1) 68:21 Gary (5) 37:1;38:12,20;78:7;84:20 gave (2) 37:6;52:14 Gay (2) 59:2,7 geeks (1) 49:9 gender (3) 62:15,18,19 general (1) 83:9 generalized (1) 52:21 generally (2) 48:21;53:1 generate (1) 20:12 generated (1) 6:7 generating (1) 21:4 Georgia (4) 9:9;75:2,12;79:19 Germany (1) 79:1 gets (1) 21:18 Gives (1) 12:8 giving (1) 51:2 Good (8) 14:11,12;28:14,15;57:2, 7;65:17;70:7 goods (1) 33:9 government (5) 12:1;37:15;61:21;73:4; 77:3 graduate (1) 34:20 Graham (1) 23:16 Gray (3) Min-U-Script(R) 59:11;60:5,10 guess (1) 48:4 guest (2) 10:13,13 guidance (1) 14:18 guilty (4) 45:3,5;54:14,20 guy (1) 43:4 guys (2) 65:17,18 78:17;79:17;83:1 help (2) 64:4;71:9 helping (1) 70:9 Hereby (4) 32:21;73:8;78:8;82:16 highest (1) 75:16 himself (5) 56:17;63:10,15;66:11; 67:6 hired (1) 17:4 hold (5) H 17:13,19;18:3,4,7 home (1) Hacker (4) 47:18 59:11;60:5,10,11 Homeland (2) half (1) 33:6,7 6:1 honestly (1) hand (1) 63:20 37:4 Honor (17) handing (4) 5:8;15:5,10;18:18;27:12; 26:5;27:13,16;84:1 28:11;32:7,9,15;54:6;62:2; handled (2) 70:14;71:12;72:5,16;82:14; 37:17;38:2 87:9 handles (1) hopefully (1) 73:19 69:3 handling (6) 36:20;74:21;75:14;76:11; hoping (1) 69:15 80:2,17 host (1) happened (1) 10:12 41:10 house (2) happens (1) 49:9;54:16 11:10 HP (13) hard (44) 38:2,6;39:4;47:8,12; 12:13;13:7;22:12,15,16; 50:17;52:15;77:10,13; 23:2,13,18;24:10,14;25:1; 81:20,21;85:9,12 26:13;29:4,19,21;30:1,11, HSI (1) 18,21;37:18,19;38:3,3,6; 33:11 39:2,4;50:16,19;51:3;52:13, 14;53:18;77:5,8,11,13,17; huge (1) 62:21 81:15,19,21;85:3,6,10,12 human (2) hardware (1) 67:16,17 36:5 humanist (3) hash (7) 67:9,12,15 11:11,11,15;24:1,2,4,10 humanity (1) Hat (2) 70:20 60:5,10 HURLEY (8) hatred (1) 8:17;14:9,10;18:15,21; 30:17 28:12,13;32:15 headquarters (1) 79:8 I health (1) 52:17 hearing (1) IBM (1) 16:6 47:10 hearsay (6) idealistic (2) 56:14;66:3 57:15;58:15;59:14,16; 60:1;70:13 ideas (1) heart (1) 70:21 64:7 identification (13) 26:4,6,20;27:13,15,17; held (3) Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 28:10;36:13;39:2,3;80:6; 83:12;87:2 identified (2) 41:7;56:17 identity (1) 62:15 ideologically (1) 56:7 idiot (1) 43:4 Ii (1) 38:21 IM (2) 55:2,4 image (8) 10:20,21;11:4,4;14:14; 24:1,2;28:18 images (2) 12:6;28:17 imagine (1) 23:13 impact (1) 64:18 impacted (1) 67:1 implicated (2) 30:5,12 importance (1) 67:16 important (1) 65:11 improve (1) 44:8 inaccessibility (2) 48:18,19 inactive (1) 35:4 inaudible (206) 5:18,18,21;6:2,9,10,11, 20;7:7,8,11,19;8:1,3,10,13, 19;9:4,8,10,15;10:2,6,8,17; 11:1,5,11,18;12:4,5,9,9; 13:5;15:11,20;16:11,15,21; 17:9,12,16,20;18:2,3,3,13; 19:3,5,6,9,10,13;20:9,21; 21:20;22:4;23:6,8;25:2,10, 20;26:11,19;27:10,11;28:3; 33:9,13;34:13,17;35:13,20; 36:9,10;37:6,7,18;38:4,7, 20;41:7;42:19;43:17;44:1, 3,5;45:15;46:7,8,14,14,19; 47:11;49:16;50:8,9;51:18; 55:12;57:20,21;58:2,15; 59:5,5,8,13,17,21;60:8,9; 61:13,14,16;62:3;67:19; 68:8;69:7;73:8,16,17;74:2, 7,8,10,11,13,14,14,15,16,17, 18,20,21;75:1,1,2,4,6,9,10, 20;76:3,5,20;77:6,7,8,11,14, 16,16;78:8,16,21;79:3,5,5,8, 10,16,20;80:2,4,19;81:5,5,6, 12,16,21;82:1,2,5,6,7,7,15, 17,21;83:6,10;84:13,19,20; (93) Fujitsu - inaudible United States vs. PFC Bradley E. Manning 85:1,3,3,4,4,6,8,9,10,11,11, 12,18,20,21,21;86:5,6,9,13 incident (1) 36:5 included (1) 35:15 includes (1) 74:21 incorrect (1) 42:15 incredible (1) 64:11 in-depth (1) 20:8 Indiana (6) 34:15,17;35:6,7,11,12 indicating (1) 40:10 individual (4) 61:17;76:8;80:21;84:5 individuals (2) 34:9;45:18 individual's (1) 58:3 Industrial (1) 18:11 industry (3) 18:4,12;34:12 informal (1) 20:15 information (35) 18:8;19:16,18;24:17,18; 25:3,12;29:5;30:9;36:15; 37:8,14;40:9,10;45:15; 49:19;55:16;57:2;58:8; 64:17,20;65:12,14;66:9; 69:12,16;70:1,3,6;71:18; 76:5,17;77:1,2,17 informed (1) 69:13 initial (7) 18:16;41:10,12;42:11; 55:10;58:4;62:11 inside (1) 66:9 inspector (1) 5:18 instance (2) 58:17;61:12 instant (3) 37:10;43:12,14 Institute (1) 79:17 instruct (1) 42:8 intelligence (4) 7:20;61:8;62:6;78:11 intended (1) 44:1 intentioned (2) 56:9,12 intentions (1) 57:8 Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session interact (1) 39:20 interaction (2) 40:1;78:5 interactions (1) 43:3 intercepting (1) 43:21 interest (2) 24:14;34:4 internal (1) 23:2 International (2) 10:3;60:9 Internet (1) 47:18 interpretation (1) 57:3 interrogation (1) 35:19 interviewing (1) 35:19 interviews (2) 36:20;76:10 into (15) 6:8;10:11;20:8;24:1; 70:17;78:15;80:11,12;82:3, 11;83:17,18;84:13;86:2,17 introduction (1) 36:4 intrusion (1) 6:20 intrusions (2) 33:18;34:7 investigate (4) 6:20;33:8;34:1;66:6 investigation (29) 14:15;22:9;24:15;28:19, 21;33:7,13,17;35:15;36:19; 37:4;51:13;73:14;74:6; 76:9,13;79:1,10,16;81:9,14; 82:6,21;83:5,7;84:11,13,15; 85:19 investigations (3) 10:7;33:7;34:6 Investigative (8) 6:15,17;15:20;20:20; 21:2;28:16;33:14;73:15 investigator (3) 14:19;34:21;78:21 involved (2) 81:8;84:10 involvement (1) 22:7 involves (2) 21:16;60:8 involving (1) 35:15 Iraq (1) 64:21 isolated (1) 63:13 issue (3) - Vol. 2 June 4, 2013 57:21;62:15;87:8 issues (3) 5:6;24:9;75:7 item (11) 10:11;11:8;23:10;38:4; 39:2,4;77:6,21;83:16; 85:20;86:12 items (5) 38:14;77:20;79:13;85:14; 86:10 84:18 knew (6) 58:18;59:10;60:4,14,18; 71:15 knowledge (2) 23:10;38:21 known (10) 18:9;37:19;38:6;53:3; 77:7,13;81:18;82:10;85:6, 12 J L January (3) 32:21;83:4,6 job (4) 6:6;67:1;73:15,19 John (1) 84:19 Johnson (11) 15:11,13,19;16:1;18:15, 19;22:7;26:7;27:3,19;32:10 joined (1) 79:3 joining (1) 79:10 Judge (1) 35:5 Julian (1) 71:15 June (25) 16:16;17:3;19:11;37:2,5; 38:7,10,12;50:9;73:8;76:12, 15;77:9,14,19;78:8;81:13, 17;82:2,5,9,15;85:2,5,11 juris (2) 35:6,10 Justice (1) 34:2 Lab (2) 79:19,20 laboratory (2) 79:21;83:5 Lamo (24) 37:4,5,19,20;38:6;39:2,3, 5,7,13,16;44:3;45:7;52:16; 54:1,10;71:20;72:4;76:15; 77:13,14;81:17,19;82:1 laptop (8) 22:18;37:17;47:9,10; 53:18;77:5;81:15;85:2 laptops (1) 52:13 large (1) 54:11 Last (1) 75:20 Lastly (1) 72:10 later (2) 86:5,16 law (13) 33:8;34:20;35:11,12,13; 37:6;55:11,13,15;56:1; 75:11;76:15;79:14 Laws (3) 34:3,6;36:1 LBGT (3) 58:20;59:2,4 leave (1) 49:9 leaving (1) 38:11 left (1) 7:6 legal (1) 19:17 Lenovo (8) 37:17;47:7,9;50:16; 52:15;77:5;81:15;85:2 Lesbian (1) 59:2 letters (1) 41:6 level (1) 11:1 Lewis (1) 79:17 Lexis-Nexis (1) K K4014 (1) 85:4 K40T812 (1) 77:6 Kakashima (1) 51:17 keep (3) 49:11;66:21;67:1 kept (1) 49:7 Kevin (1) 51:17 key (2) 42:6,7 keys (1) 42:19 killing (1) 63:10 kind (3) 6:4;7:18;60:19 Kirk (1) Provided by Freedom of the Press Foundation (94) incident - Lexis-Nexis UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning 44:19 liaison (2) 73:20,21 library (4) 13:1,2,12,15 licensed (1) 35:12 life (4) 55:20;62:12;63:17;67:17 likelihood (1) 29:14 likely (1) 20:19 line (1) 62:4 lines (1) 43:16 little (2) 16:7;87:6 living (1) 53:5 Loaded (1) 23:21 locate (3) 13:7;80:15;83:20 located (3) 24:21;73:17;74:20 location (2) 80:16;83:21 lockup (1) 23:20 log (4) 37:11;76:20;82:8;83:16 logged (4) 82:3,4,13;86:2 logs (7) 51:2,6,8,10,14,16;82:10 long (5) 5:20;16:14;19:10;20:2; 70:9 look (3) 14:20;15:2;19:16 looked (2) 29:18;30:20 looking (8) 19:15,17;20:7;29:1,17; 30:4,5,16 loss (1) 54:3 lot (5) 20:10;29:4;32:1;64:4; 70:21 lots (1) 18:12 Low (1) 47:13 lowest (1) 11:1 loyalty (1) 71:3 lunch (2) 87:5,6 Min-U-Script(R) 13:6,10 match (2) 11:13;36:13 matches (10) ma'am (1) 24:3;76:4;80:5,7,17;81:3; 16:8 83:11,13;84:1,8 MAC (2) mathematical (1) 10:14;22:15 24:5 machine (3) matter (1) 10:10,11,13 59:18 main (1) may (15) 6:19 12:17;14:4;20:20;34:13; mainly (1) 37:9;39:21;45:9;49:4,6; 6:6 53:17;55:5,8;69:19;72:1,2 maintain (2) Maybe (3) 36:17;76:7 16:7;66:2;68:10 maintained (3) mean (10) 38:15;77:21;83:2 8:2;10:9;14:1;17:11; major (2) 40:8;42:7;43:20;48:16; 8:11;52:20 51:12;71:7 malicious (1) means (2) 33:18 42:1;67:15 management (1) media (19) 79:18 6:6;8:14,15;9:1,2;11:6; Manager (1) 16:3,5;17:9;21:13,20;22:8; 78:12 23:1;29:5,15;36:8;52:6; manipulate (1) 75:7;83:7 51:5 medical (2) manner (1) 54:3;79:16 53:11 medication (1) Manning (42) 54:4 37:13;39:17,20;40:3,5, 18;42:12;43:1,3,6;45:8,11; medications (5) 53:4,7,10,14,19 46:7,11;47:4;53:13;55:1,11, meet (1) 17;56:2,5,16,20;57:10,14; 50:10 58:7,8,12,18;59:10,15,19; memo (1) 60:14,19;61:2,4;67:9,18; 21:3 71:15,17,20;76:21 memory (7) Manning's (2) 53:2,8,11,15,20;54:2; 23:12;55:19 86:13 many (6) mental (1) 7:15;17:17;44:9;45:21; 52:17 46:21;50:2 mentioned (6) March (3) 11:19;30:14;41:4;43:3; 33:5,11,12 60:17;77:15 Marina (1) merits (3) 82:15 33:2;73:10;82:17 Mark (3) mess (1) 15:11,13,19 63:1 marked (19) message (5) 26:3,6;27:17;28:9;37:18; 37:10;42:9;43:7,12,14 38:5;77:7,12;80:6;81:18; messages (1) 82:7,10;83:12;85:5,11,20, 76:19 20;86:10;87:1 messaging (1) market (1) 43:12 12:1 messenger (2) markings (1) 41:15;43:8 36:12 met (1) martial (5) 57:12 33:3;54:1;73:11;78:10; methods (1) 82:18 7:21 Maryland (2) Microsoft (1) 9:10;75:4 44:19 master (2) M Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 might (2) 24:17;65:15 Military (7) 34:2;40:15;46:8;60:12; 74:5;78:20,20 mind (1) 62:3 Mine (2) 46:12,14 mini (5) 50:17;52:15;77:10;81:20; 85:9 mini- (1) 47:8 mini-brand (1) 38:2 minimum (1) 7:21 mission (1) 6:21 misunderstood (1) 68:19 moment (4) 8:16;22:6;62:2;72:19 money (1) 32:1 moniker (1) 46:10 month (1) 54:16 months (1) 20:3 moral (1) 63:7 morality (1) 67:17 More (6) 21:3;41:13;42:20;47:2; 60:9;79:15 Morgan (1) 34:14 MORNING (5) 5:1;14:11,12;28:14,15 MORROW (18) 5:4,9,15,16;8:19,21;14:5; 15:5,10,17,18;16:9;18:18; 19:2;22:6;27:2;32:9,12 most (1) 45:18 mostly (1) 47:14 motivated (1) 56:7 Move (2) 26:20;86:21 movies (1) 14:3 MP (2) 74:6,10 much (4) 20:8;49:10;57:8;68:17 multiple (2) 40:17;72:14 (95) liaison - multiple United States vs. PFC Bradley E. Manning must (1) 75:18 myself (1) 50:4 UNOFFICIAL DRAFT 6/4/13 Morning Session 58:10 objection (8) 18:21;32:14,15;57:15,19; 58:9;59:12;87:9 observe (1) 22:11 N obtain (1) 18:14 naive (1) obviously (1) 69:19 13:4 name (10) occasionally (1) 27:8;41:1,8,8,9,9;43:3; 79:12 45:16,16;46:10 occasions (1) national (1) 64:7 35:5 occur (1) native (1) 44:20 12:7 October (3) nature (2) 34:14;75:20;85:21 58:2;59:19 off (1) need (2) 46:1 5:6;20:8 offenses (1) needed (4) 54:13 20:18;63:7;64:4;84:14 offer (1) needs (2) 18:19 13:19;14:3 offered (1) netbook (1) 57:16 47:13 offering (2) network (7) 47:18;58:1 17:11;40:16;43:11;45:21; offers (1) 46:8;74:1;75:11 14:6 networking (1) office (9) 45:14 21:9;22:2;28:3,4;33:8; networks (4) 34:13;73:17,18;83:2 44:4,6,18;64:11 officer (4) New (2) 35:14;73:20,21;74:6 44:19;74:20 offices (1) next (5) 22:3 11:5,15,17;15:9;22:5 old (2) nobody (1) 54:19;57:7 68:1 once (3) non-violent (1) 13:17;45:10,13 35:16 One (29) normal (2) 10:6;11:6;22:6;38:16; 47:21;81:6 40:20;41:3,4,4,12,17;42:15, North (1) 17;45:15;47:7;49:1,15; 35:10 50:7;60:21;64:1,10;67:19; note (4) 68:21;69:21;70:10,16; 31:5,16,18;32:4 72:19;75:16;85:2,5 noted (5) ones (2) 30:19;31:3,9,14;32:1 9:8;51:11 November (6) online (6) 25:19;34:11,11;86:3,8,9 39:18;43:7,12,14;46:17; number (17) 47:14 20:14;37:19;38:3,4,5; only (7) 77:6,7;80:7,15;81:16,20; 46:16;47:3;50:4,6,7; 82:1;83:20;85:3,6,10;86:13 52:14;65:20 numbers (2) Open (3) 36:12;41:6 28:3,4;52:4 numerous (2) opened (1) 43:16;75:4 28:2 operating (4) O 10:14;11:1;13:6,19 operation (2) objected (1) Min-U-Script(R) - Vol. 2 June 4, 2013 25:8;74:2 order (4) 5:2;49:20;50:1;87:7 organization (1) 7:4 organized (1) 11:1 original (6) 23:16;51:6,8;77:16,17,18 originally (1) 24:4 originals (3) 51:18,21;52:3 originated (1) 40:10 others (1) 66:12 otherwise (1) 9:10 out (18) 23:19;42:16;49:1,1; 59:19;60:20;61:5;62:8; 64:7;65:12,14;66:6;70:10; 80:10;82:5,13;83:15;85:9 outside (1) 33:10 over (5) 38:15;52:7;53:18;83:12; 84:1 Overgaard (1) 5:5 overwrite (3) 13:20;14:1,4 owns (2) 12:3;29:14 P Pad (3) 47:7,9;50:17 parlance (2) 87:11,13 part (2) 6:7;13:20 partial (1) 13:16 participated (2) 34:5,8 participation (1) 68:5 particular (9) 29:5,14,17,18;30:4; 36:19;42:2;43:2;76:9 parties (3) 5:3;73:1;87:7 party (4) 43:8,21;44:2;73:2 pass (2) 49:21;50:2 password (3) 48:17;49:20;50:2 pathology (1) 79:17 Provided by Freedom of the Press Foundation Pause (3) 27:1;72:9;87:4 PE27 (1) 73:8 PE28 (1) 78:8 peer (1) 21:8 people (13) 7:15;17:17;20:14;45:21; 48:10;50:2;51:13,16;67:1, 7;69:9,15;70:21 perform (1) 28:18 performing (1) 74:16 performs (1) 60:12 perhaps (2) 41:14;45:13 permanently (1) 72:10 permission (1) 60:12 person (6) 10:16;29:14;48:21;49:7; 57:12;66:6 personally (1) 57:11 personnel (2) 37:7;76:16 pertaining (4) 33:17;34:7;37:9;76:17 PFC (42) 23:12;32:1;37:13;39:17, 20;40:2,4,17;42:12;43:1,3, 6;45:8,11;46:11;47:4; 53:13;55:1,10,16,19;56:2,5, 16;57:10,14;58:6,8,12,17; 59:10,14,18;60:14,19;61:2, 4;67:9,18;71:15,17,20 phases (3) 73:11;78:9;82:18 phone (2) 9:3,3 photographs (1) 37:11 phrase (2) 49:21;50:3 physical (3) 48:17,19;80:1 physically (2) 13:12;48:20 Pidgin (5) 46:16,19;48:4,5;51:8 P-I-D-G-I-N (1) 43:10 piece (11) 21:12,21;22:21;37:16; 38:1;77:4,10;80:4,15; 83:19;84:12 pieces (5) 24:16,18;37:3;38:9;86:8 (96) must - pieces United States vs. PFC Bradley E. Manning place (2) 44:21;45:1 placing (1) 80:13 plain (2) 37:12;76:20 please (6) 5:3;12:20;21:15;22:2; 25:14;32:17 pled (4) 45:3,4;54:14,20 plethora (1) 65:20 point (12) 43:2;51:14;56:10,11; 57:17;63:9;64:10;68:21; 69:21;70:10,16;72:15 Police (3) 10:4;74:6;78:20 policies (1) 7:21 political (1) 65:6 politics (1) 70:18 popular (1) 45:20 posed (1) 11:18 position (11) 7:13;16:1,19;17:13,15; 62:1;76:1;78:14,17;83:1,1 possession (5) 38:10,14;77:20;82:3,11 possibly (2) 48:2;62:9 post (1) 65:9 potentially (1) 29:13 Poulsen (1) 51:17 pouring (1) 64:7 powered (1) 47:13 PowerPoint (6) 24:19;27:4,6;28:2,5;29:9 practice (2) 35:12;47:21 preferred (1) 68:7 prescribed (1) 53:4 present (9) 5:4;33:2;73:1,3,10;78:9; 81:8;82:17;84:10 presentation (2) 24:20;28:3 presentations (1) 29:9 presented (1) 41:9 Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session presentencing (2) 73:11;78:9 preserved (1) 51:8 preserving (1) 83:17 prevented (2) 48:14;49:17 previous (1) 76:2 previously (2) 39:13;45:17 primarily (1) 78:14 primary (4) 79:6,12;82:20;84:21 printed (2) 26:15;28:6 Prior (4) 19:7;33:11;36:17;76:8 Pro (1) 22:15 Pro- (1) 22:17 probably (1) 61:12 probation (1) 54:17 procedures (8) 7:21;36:2;82:4,12;83:9; 85:16;86:3,18 proceed (4) 5:7;32:18;61:15;73:5 PROCEEDINGS (1) 5:1 process (9) 7:3;14:13;21:4,7,8,17; 23:17;28:16,16 product (1) 22:18 professional (1) 18:9 program (10) 8:4;10:18;11:9;35:1;43:8, 9;46:16,19;75:12;78:12 programming (1) 43:15 proper (6) 36:15;50:20;82:4,12; 85:15;86:18 properly (8) 36:16;38:10,11,15;76:6; 77:18;83:15;86:1 property (2) 37:14;77:2 Prosecution (12) 26:4,6;27:13,14,18; 28:10;32:21;39:1,3;82:16; 87:1,2 prosecutor (2) 34:14;35:14 Prudence (1) 35:11 - Vol. 2 June 4, 2013 psychology (1) 35:9 public (7) 42:6,7;57:2;64:13;70:4,7, 7 published (1) 9:11 pull (2) 80:15;83:19 purposes (1) 60:13 put (1) 14:3 86:1 recess (8) 32:13,16;72:5,7,18,21; 87:6,7 recessed (2) 87:13,14 recipient (3) 40:11;42:3,10 recognize (2) 26:7;27:19 recognized (2) 19:1;69:18 recollection (2) 25:19;41:18 record (3) Q 47:19,21;48:5 recorded (14) Quantico (1) 36:12,16;38:4;48:3,10; 82:21 76:6;77:12;80:7;81:18; quarters (1) 82:9;83:13;85:5,19;86:9 49:18 recover (1) quickly (1) 13:16 18:18 redacted (1) 51:9 R redactions (1) 51:20 range (1) Redirect (2) 75:6 15:4;32:8 rather (1) referenced (1) 42:3 60:16 reach (1) referencing (2) 62:8 41:3;47:4 reached (1) referring (3) 59:19 28:6;84:2;85:8 reaching (2) reforms (1) 60:20;61:5 69:4 reaction (1) regained (1) 69:6 38:10 read (2) regional (1) 42:4,11 73:21 Ready (3) regulations (1) 32:17;35:4;73:4 34:7 realize (1) related (12) 42:21 9:11;15:1;17:9;18:12; really (1) 19:17;24:17;31:10;44:7,15; 68:11 81:13;82:5;85:18 reason (4) relating (4) 38:18;60:21;78:1;85:13 37:3,13;76:13,21 recall (6) relatively (1) 23:15;25:17;27:8;30:13; 22:3 60:16;64:14 release (4) receipt (2) 80:18;84:2,14;85:15 80:11;83:16 released (7) receive (10) 38:8;77:18;80:20;84:4; 9:5,21;19:13,14;20:1; 86:4,6,14 44:2;75:16;80:3,14;84:17 releasing (2) received (23) 38:20;78:4 34:18;35:1,6,18;37:2; 40:17;41:1,10;45:17;54:16; relinquish (2) 81:1;84:6 74:19;75:19;76:12,14;78:1; remainder (1) 81:1,11,13;83:4;84:6; 61:13 85:15;86:8,16 remove (2) receiving (5) 13:10,11 41:13;80:21;83:19;84:5; Provided by Freedom of the Press Foundation (97) place - remove UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning renewed (1) 75:18 replied (1) 43:4 reply (2) 40:11;41:17 report (9) 20:12,13,15,15;21:3,4,9; 30:14;31:5 Reports (1) 78:16 representation (2) 28:6;65:4 request (3) 19:14,19;20:1 requested (2) 80:19;84:3 requesting (1) 87:6 requests (3) 32:12;33:9;87:5 require (1) 49:20 research (2) 6:15;57:21 reserve (1) 35:4 residence (1) 47:16 respect (3) 18:11;30:3;32:20 respectively (1) 87:3 response (5) 36:5;58:3;61:13;74:1,17 responsible (2) 17:8;33:16 Reston (1) 75:9 result (1) 9:21 retained (1) 51:20 retired (1) 79:7 retrieve (1) 13:8 retrieving (5) 26:3;27:12,17;28:9;40:6 return (3) 40:6,8;46:5 returned (6) 77:21;79:9,20;85:14; 86:5,15 review (8) 18:18;21:5,8,9;25:21; 36:10;44:7;76:3 reviewed (2) 20:14;25:3 reviewing (1) 78:15 right (3) 22:5;31:8;61:6 Min-U-Script(R) role (3) 81:9;84:11,16 room (10) 64:13;80:11,13;81:7; 82:12;83:16,18;84:14;86:2, 17 routers (1) 17:12 run (1) 73:18 Russia (1) 70:1 S SAC (2) 73:18;74:4 Sacramento (5) 37:20;38:7;39:14;81:17; 82:2 Safeway (1) 47:17 Same (13) 10:18,18;11:14;21:21; 45:16;46:8;55:1;77:21; 85:13,14;86:2,5,16 save (1) 52:4 saving (1) 52:5 saw (7) 56:9,11,14;57:4,7;66:8; 69:16 saying (1) 67:12 scandal (1) 65:9 scared (2) 63:20;68:17 scene (1) 35:20 School (1) 35:11 scope (1) 20:18 SD (3) 86:12,13,14 search (4) 6:7;34:8;35:21;76:16 searches (1) 36:1 seated (1) 32:17 second (4) 38:1;41:1,4;77:10 section (1) 74:6 secure (3) 36:17;76:7;81:10 securities (1) 74:2 security (6) 18:8;33:6;34:12;44:6,7,8 seemed (3) 31:21;67:19;68:2 Seized (1) 82:9 seizures (1) 36:1 self-interest (1) 65:21 sell (1) 70:1 sender (1) 45:17 senior (1) 79:6 sent (3) 20:13;41:17,19 sentence (1) 54:16 separate (2) 37:7;66:11 separated (1) 67:6 sergeant (1) 74:13 serial (9) 36:12;38:2,4;77:6;81:16; 82:1;85:3,10;86:13 series (2) 39:18;42:8 serve (4) 35:4;37:8;74:19;82:10 served (4) 34:17;74:3,6,13 server (2) 9:3;82:8 servers (2) 42:19;64:13 serves (2) 74:9;85:1 service (2) 43:7,17 serving (2) 73:20;79:11 SESSION (1) 5:1 set (1) 22:2 several (6) 37:2;41:13;54:11;64:6; 80:2;84:12 shapes (1) 23:1 share (2) 50:5;51:16 shared (4) 51:11,12,14;55:17 Shaver (15) 5:8,9,11,17,20;9:1;14:6, 11;15:6;19:7,13;84:18; 85:13;86:4,15 sheer (1) 20:9 sheriff (1) Provided by Freedom of the Press Foundation - Vol. 2 June 4, 2013 34:18 sheriff's (1) 34:18 show (2) 25:13,15 shown (1) 31:19 sides (1) 72:19 sign (11) 52:7,10;80:10,11,20;81:7, 7;83:15,16;84:4;85:9 signed (1) 84:12 signing (1) 76:15 signs (2) 80:21;84:5 Simply (1) 8:14 sit (1) 22:5 site (2) 42:3;45:14 situation (2) 20:21;25:15 Situational (2) 33:21;79:12 six (1) 54:16 size (1) 22:4 sizes (1) 23:1 slower (1) 16:7 small (2) 22:3;47:13 smart (1) 70:21 social (2) 45:14,20 Sociology (1) 8:12 Software (3) 9:20;75:9;77:16 sole (1) 63:15 somebody (3) 46:7;62:9;63:6 someone (3) 49:17;60:11;80:14 Sometimes (2) 20:19;25:9 somewhere (1) 14:3 sorry (3) 41:3;46:12;87:12 sort (1) 31:12 space (4) 12:10,11;13:18;14:2 spaced (1) (98) renewed - spaced United States vs. PFC Bradley E. Manning 11:1 spaces (1) 12:9 speak (1) 16:7 Special (59) 5:17,17,20;6:3,5,11,12, 14;7:18;8:17;9:1;14:6;15:6; 16:17;19:4,7,8,9,13;32:20; 33:1,6,12;34:1,12;35:3,14; 36:21;38:9,10;50:11,12; 52:6,12,14;53:18;73:7,9,13, 16;74:3;75:2;76:9,13; 77:19;78:4;79:20;80:18; 81:5,11,14;84:2,17,18,19, 19;85:13,19;86:15 Specialist (1) 9:8 specific (1) 61:1 specifically (5) 6:4;17:4;23:15;27:9; 73:14 specified (1) 42:15 speculation (2) 56:8;59:12 split (1) 21:18 splitting (1) 21:19 spoke (1) 50:19 spreadsheet (1) 25:16 standard (3) 11:21;18:11;77:15 Starbucks (5) 47:17,17;49:13,15,18 start (5) 22:19;45:8;48:19;49:3; 71:20 started (4) 43:1;45:10;55:1;62:18 State (7) 34:3;35:13,14;47:16; 62:3;65:2;82:8 stated (1) 45:12 statement (2) 61:18,19 States (15) 14:5;15:10;32:12;33:10, 19;34:4,6;37:15;39:5; 65:20;72:14;77:2;79:19; 86:21;87:5 station (1) 23:20 stay (2) 66:9;72:11 step (2) 11:15,17 still (5) Min-U-Script(R) UNOFFICIAL DRAFT 6/4/13 Morning Session 13:12,14,15;15:8;48:2 stipulate (1) 18:15 Stipulation (3) 32:19;78:7;82:14 stipulations (3) 72:15;73:6;86:20 storage (2) 22:21;81:10 stored (4) 25:2;38:15;80:14;83:19 strangers (1) 64:8 string (3) 41:6;54:11,13 structure (1) 67:17 stupid (1) 69:19 Subjectively (1) 56:13 subordinates (1) 17:18 subpoena (1) 6:8 subsequently (1) 35:7 substantially (2) 33:3;73:12 subunit (1) 16:13 successor (1) 47:10 suffering (1) 54:2 suggested (1) 31:13 suggesting (1) 41:14 supervise (2) 7:15;17:17 supervised (1) 7:16 supervisory (2) 7:13;17:13 support (3) 6:21;43:17;63:7 supported (1) 7:16 supporter (1) 58:20 supporting (1) 31:13 supposed (4) 8:5,5;19:15;42:4 sure (12) 8:4;21:10;24:3;67:3;80:5, 9,17;81:2;83:11,14,21;84:7 surrendered (1) 52:6 Sustained (1) 70:13 swaths (1) - Vol. 2 June 4, 2013 20:7 switches (1) 17:12 sworn (3) 5:12;15:14;39:8 Syndrome (1) 52:20 system (6) 10:14;11:2;13:6,19;25:8; 27:7 systems (1) 18:8 T table (2) 13:7,11 tags (1) 67:12 talk (4) 15:7;23:17;49:2;63:18 talked (2) 14:13;30:8 talking (5) 29:3,21;46:6;63:6;71:21 task (2) 20:11;59:5 team (4) 74:1,17;81:9;84:12 teams (1) 21:18 technically (1) 10:21 techniques (1) 35:19 technology (1) 33:10 temp (1) 7:5 temporarily (3) 15:7;32:10;86:4 ten-minute (2) 32:13;72:17 terms (2) 62:18;75:3 terrorism (2) 31:10,13 test (1) 11:2 testified (5) 5:14;15:16;39:10;56:16, 19 testify (8) 33:2,3;61:17;73:10,11; 78:9;82:17,18 testimony (5) 32:20;54:2;73:7;82:15; 86:21 testing (1) 44:6 Texas (1) 78:19 thinking (1) Provided by Freedom of the Press Foundation 70:20 third (3) 43:8,21;65:3 thought (6) 62:8;64:17;65:14;66:2, 21;68:4 thousands (1) 71:18 threat (2) 59:10;60:7 threats (2) 60:8,9 three (5) 24:16;73:6;74:4;79:8; 86:20 throughout (3) 7:3;12:1;79:14 Times (2) 44:19;79:13 title (1) 73:16 today (2) 5:7;54:1 Together (1) 36:7 told (38) 15:2;57:1,14;58:7,8,13; 61:8;62:6,11,14,17,21; 63:12;64:1,4,17;65:5,11,17; 66:2,5,8,16,21;67:6,9,18; 68:1,7,10,14;69:3,6,15,18; 70:3,12,16 Toni (4) 32:19,20;50:11;76:10 took (7) 44:21;45:1;75:5;79:15; 81:15,20;82:6 tool (5) 8:2;10:7;11:5,8;17:9 tools (2) 8:3;12:16 total (1) 64:8 track (3) 67:1,1;83:2 trailers (1) 42:18 training (13) 9:9;34:19,21;35:1,1,18; 75:3,11,12,21;79:16,21; 83:7 transfer (3) 31:19;81:4;84:9 transferred (2) 81:3;84:8 transferring (2) 36:18;76:8 Transgender (1) 59:2 traumatized (1) 68:11 travel (1) 49:15 (99) spaces - travel UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning Treasury (1) 6:13 Trial (7) 5:2;15:8;33:1;59:21; 73:9;78:8;87:14 tried (1) 66:6 trouble (1) 16:6 trust (1) 64:2 truth (15) 5:13,13,14;15:15,15,16; 39:9,9,10;57:16;58:2; 59:18;66:6;68:7;69:10 trying (1) 63:9 turn (1) 6:8 turning (1) 53:18 TV (1) 20:10 Two (14) 10:6;11:2,13;17:18;20:3; 37:7;46:20;47:2,3,6;54:17; 57:12;75:8,19 two-hour (1) 87:6 two-man (1) 73:18 two-way (1) 40:2 type (4) 19:16;21:3;55:16;66:5 types (2) 29:4;33:18 Typically (2) 19:12;20:2 U Ultimately (1) 23:15 Unallocated (1) 12:13 Uniform (1) 34:2 Unit (7) 6:16,18,19;15:20;23:16; 33:14;73:15 United (14) 14:5;15:10;32:12;33:10, 19;34:4,6;37:14;39:5; 72:14;77:2;79:19;86:21; 87:5 University (3) 35:7,10,11 unlawful (2) 33:9;44:18 unreadable (1) 44:1 up (5) Min-U-Script(R) 21:19;22:2;24:5;63:10; 64:6 upbringing (1) 62:12 upon (3) 66:8;82:3;86:1 USA (3) 33:13,21;34:10 usable (1) 6:8 USB (1) 23:3 USC (1) 33:20 use (8) 13:19;14:2;35:16;42:16; 43:9;46:16;47:3;54:4 used (15) 11:9,21;12:1,14,15; 13:18;42:16;43:12;46:10, 20;47:14;53:10;81:3;84:8, 20 user (12) 41:8,9,14;42:3,3;45:13, 16;46:4,9,10;48:6;50:6 users (1) 42:20 Using (8) 38:8;46:19;53:14,19; 77:17;82:4,12;86:2 usually (1) 49:1 V validate (1) 24:2 Validated (2) 8:6;24:1 validation (1) 8:2 valuable (1) 29:13 value (5) 11:11,12;24:6,6,10 values (3) 11:13,15;67:10 variance (1) 20:6 various (3) 47:16;48:14;79:13 VD (1) 82:7 verification (1) 24:9 Verified (1) 11:15 version (1) 28:4 versions (1) 51:10 versus (1) 65:18 - Vol. 2 June 4, 2013 via (1) 41:14 video (1) 24:20 view (4) 12:7;13:5;56:10,11 violations (3) 33:17;34:2,6 violent (1) 35:15 Virginia (4) 33:15;74:15;75:9;82:21 virtual (2) 10:9,10 volume (1) 20:9 volunteer (1) 59:7 voucher (2) 80:15;83:20 W walk (1) 80:12 walked (1) 82:11 wallpaper (1) 10:18 warrant (2) 6:7;35:21 warrants (1) 34:8 Washington (2) 64:14;74:7 way (12) 38:17,19;42:9;51:9;52:5; 53:14,20;67:6;78:3;85:17; 86:7,19 ways (1) 44:8 weak (1) 68:15 wheels (1) 11:2 Whereupon (3) 5:10;15:12;39:6 whole (4) 5:13;15:15;39:9;69:13 Whyte (1) 73:3 wide (1) 20:7 WikiLeaks (6) 30:5,12;60:15,17;70:10; 85:21 Wilbur (1) 85:19 Windows (3) 10:14;13:4;36:5 without (2) 12:8;69:12 witness (12) Provided by Freedom of the Press Foundation 5:12;15:9,14;16:8;26:5; 27:14,16;36:20;39:8;57:18; 72:13;76:10 words (2) 71:5,11 work (19) 6:4;7:7,18;10:1;16:4,4, 10,12,13;17:4;19:10,12; 21:5,7,13,16,20;73:15;87:7 worked (10) 5:21;36:21;44:10;75:21; 76:9;79:8,10,15;81:5;84:17 working (7) 7:1;33:11;34:10;50:19, 20;79:9;84:21 workstation (1) 23:21 world (3) 64:18;65:2,3 worldwide (2) 7:17;69:3 worse (1) 68:4 write (2) 11:6;13:20 writing (1) 19:14 wrote (1) 41:13 X Xchat (1) 41:15 Y year (3) 6:1;57:7;75:5 years (14) 20:3,4;44:9,12;54:17,19; 62:18;74:4,5;75:19;78:13, 18;79:9,14 York (2) 44:19;74:20 Young (9) 37:1;38:12,20;56:5;57:7; 69:19;78:7;84:20;85:1 Z zero (2) 11:3,5 0 0028-102CID221-10117DEPT (1) 82:8 1 1 (7) 11:3;38:4;39:2;77:6; (100) Treasury - 1 UNOFFICIAL DRAFT 6/4/13 Morning Session United States vs. PFC Bradley E. Manning 81:17;85:20;86:10 1:35 (1) 87:11 1:45 (2) 87:12,13 10 (5) 78:13,18;85:18,21;86:14 100 (2) 75:21;76:1 1030 (1) 33:20 11:15 (1) 72:19 11:40 (1) 87:14 12 (11) 37:2,5;38:7;50:9;76:12, 15;77:9,14;82:2;85:4,11 12-June (1) 37:21 13 (4) 39:1;85:21;87:1,2 1345 (2) 87:11,12 14 (5) 38:9;39:3;77:19;87:1,2 15 (6) 38:12;44:11,12;81:13; 82:5,9 18 (1) 33:19 19 (3) 74:8;86:8,10 194 (1) 74:7 1980 (1) 78:20 1986 (1) 74:5 1989 (2) 78:21;79:1 199.56.188.73 (1) 82:9 1991 (1) 79:2 1992 (1) 78:21 1993 (1) 74:7 1994 (1) 79:3 1995 (2) 79:4,5 1996 (1) 79:15 1998 (3) 59:4;79:5,7 1999 (4) 7:2,5;74:5,9 86:9,12 200 (1) 76:1 2000 (6) 7:6;25:20;34:16;54:10; 75:5;79:7 2001 (2) 7:6;74:11 2002 (4) 7:6;44:21;74:9,12 2003 (7) 7:7;34:13;35:6;45:1; 75:8;79:9,11 2004 (3) 45:1;54:14;74:14 2005 (3) 7:12;34:16;79:18 2006 (10) 16:16;17:3;19:11;34:14; 74:14;75:8,19;79:11;83:1,4 2007 (3) 34:11;74:15;79:20 2008 (4) 33:11;34:11;74:18;75:5 2009 (2) 9:15;10:2 2010 (34) 37:2,5,21;38:7,12;39:19, 21;45:9;49:4,6;50:9;53:14, 17,19;55:5,8;72:1,2;76:12, 15;77:14,19;81:13,17;82:2, 5,9;83:6;85:2,5;86:3,8,9,14 2012 (4) 33:5,12;75:10,20 2013 (4) 32:21;73:8;78:8;82:15 20th (5) 39:21;45:9;49:4;55:5; 72:1 22 (2) 54:19;57:7 24 (4) 26:4,6,20;27:18 25 (4) 27:13,14,17;28:10 26 (1) 32:21 26th (2) 49:6;55:7 29 (2) 25:19;82:16 Min-U-Script(R) 37:18;38:13;77:12,18; 85:5,11,20;86:10,12 45 (1) 87:12 47 (1) 83:10 5 5 (1) 85:10 51E2K (1) 77:12 5th (1) 74:10 7 7610 (1) 77:7 76-10 (1) 81:18 78 (1) 7:17 8 800 (1) 79:15 87 (1) 78:20 87-signed (1) 76:14 3 3 (5) 32:20;73:7;78:8;82:15; 86:8 3137 (1) 38:5 2 2 (2) - Vol. 2 June 4, 2013 4 4137 (9) Provided by Freedom of the Press Foundation (101) 1:35 - 87-signed