Unpacking a January 6 Phone Warrant

Given the focus on legal authorities used in the January 6 investigation, I wanted to look at a search warrant affidavit for the phone of Karl Dresch, a Yooper arrested on January 19 for trespassing and obstructing the vote certification. FBI obtained it Wednesday and executed it yesterday.

The investigation into Dresch arose, as most of the January 6 investigations have, when some informed the FBI — in his case, on January 7 — that Dresch had posted about busting into the Capitol on Facebook. The FBI obtained a warrant for Dresch’s Facebook content, and then, on January 19, arrested him on trespass and obstruction charges. On January 22, in part because of his Facebook posts promising “we will be back” and in part because he had a 2013 arrest and felony conviction for a high speed chase to avoid arrest in Wisconsin, he was ordered detained pending trial. Shortly thereafter, the Houghton County Sheriff, Brian McLean, who knows both Karl and his father (who helped bust the Oklahoma City bombing terrorists), told a reporter Karl should have gotten released on bail.

His father, Stephen Dresch, who died in 2006, provided the FBI information a year prior that led agents to a stash of explosives one of the Oklahoma City bombers had hidden away at his since-vacated Kansas home.

[snip]

Despite the polar opposite outcomes, Houghton County Sheriff Brian J. McLean, who knows the Dresch family, called Stephen Dresch’s son “a chip off the old block.”

[snip]

Stephen Dresch, whom McLean described as a “brilliant, sharp guy,” and his son were “very vocal” about their beliefs, the sheriff of 24 years said. Karl Dresch “likes to give his opinion, whether other people want to hear it or not,” he said.

Houghton County deputies have dealt with Karl Dresch on “minor nuisance calls,” but never anything serious, and he wouldn’t be on a “list of people we’re concerned about,” McLean said.

[snip]

Sheriff McLean disagrees with the risk assessment. He said Karl Dresch doesn’t pose a significant risk to the public and “absolutely” should have received bond.

Since then there’s little else that has happened in this case. On February 3 he was indicted — again for the obstruction and trespassing charges, but still not an illegal possession charge tied to having two guns as a felon. On February 19, a CJA attorney filed an appearance for him. But there’s not even (in the docket) notice of his arraignment.

Now, over forty days after seizing the phone that the FBI believes he had with him on January 6, they have taken steps to access it, stating that they believe they will find evidence relating to his existing charges (trespassing and obstruction) along with unlawful possession.

Search warrant boilerplate for January 6 is slightly more comprehensive than for arrest warrants. In this case, it includes details of people calling out for Nancy Pelosi and other Members of Congress, a description of the note that Jacob Chansley left for Mike Pence in the Senate Chamber: “Justice is Coming.” It describes Eric Munchel and others wandering around with zip ties. That is, it culls the evidence from various insurrectionists that hints towards a more malign plot against Congress, without stating that explicitly. It is the story that DOJ may believe they will one day tell.

In this case, too, it includes details on the exact location and the size of the Capitol, including the Visitor’s Center.

U.S. Capitol Police (USCP), the FBI, and assisting law enforcement agencies are investigating a riot and related offenses that occurred at the United States Capitol Building, located at 1 First Street, NW, Washington, D.C., 20510 at latitude 38.88997 and longitude -77.00906 on January 6, 2021.

At the U.S. Capitol, the building itself has 540 rooms covering 175,170 square feet of ground, roughly four acres. The building is 751 feet long (roughly 228 meters) from north to south and 350 feet wide (106 meters) at its widest point. The U.S. Capitol Visitor Center is 580,000 square feet and is located underground on the east side of the Capitol.

I note the inclusion of these details because these measurements would be really useful in an affidavit that relied on details — such as the ones in Jeremy Groseclose’s arrest affidavit — that talk about the granularity of the location data the FBI is obtaining. In Groseclose’s case, a Google warrant IDed his presence in the Crypt to within 34 meters at 68% confidence. Given the size of the Capitol, then, a Google result like that would fairly clearly show the target in the Capitol, and (given a room the size of the Visitor’s Center) in the room in question.

The Visitor’s Center is one of two places inside the Capitol (the other is the Crypt) where Dresch took pictures and videos he later posted to Facebook, including this one, which court documents describe Facebook data doesn’t include the time for, but which he posted later that night.

So that may be one thing the FBI hopes to find by accessing this phone: More details about the photos Dresch took while in the Capitol. For example, there may be something on the video he took that implicates either him or others, and so want better evidence for trial.

But that’s one of the interesting absences in this affidavit. The warrant notes that Dresch used Verizon, but it doesn’t mention anything about his Verizon call records or — more especially — his location data. Presumably they have that, but have chosen not to include it.

It’s possible (indeed, the government has asserted they think they’ll find) more on the guns he has, in particular any evidence he brought them to DC either on January 6 or some follow-up trip, the one suggested by a second hotel receipt (note, in the existing affidavits, the FBI doesn’t say whom Dresch told, “we have your back give the word and we will be back even stronger,” after January 6, but Facebook surely has that).  If the FBI had reason to believe they could place someone at the Capitol with a gun, that would be an important investigative addition.

There are also his interlocutors, especially the guy, USER 2, with whom he was sharing information about what was going on in the Capitol during the event. The FBI undoubtedly knows who that is, but it’s possible FBI has reason to believe there may be more (such as deleted content) on the phone itself.

Finally, one reason the government is always going to want to exploit a phone is to obtain encrypted communications (like Signal) that wouldn’t be accessible from a provider.

None of this is at all momentous: Just an affidavit to search the phone of one presumably very minor guy, and one that can’t be all that operationally interesting (or else they would have sealed it, as virtually all search warrants currently are). Just one case among 300. At least on its face, just an effort to add another charge or learn more about other insurrectionists.

Timeline

December 16, 2020: Dresch posting about January 6: “1/6/2021=7/4/1771”

January 3: Dresch posts that he’s headed to DC: “NO EXCUSES! NO RETREAT! NO SURRENDER! TAKE THE STREETS! TAKE BACK OUR COUNTRY! 1/6/2021=7/4/1776”

January 7: Tip that Dresch posted on Facebook about entering the Capitol.

January 12: Warrant for Facebook account.

January 13: FBI obtains Facebook content. Among other things it shows the following posts from January 6 and 7:

  • January 6, 2:26: Picture 3 taken with a Moto e6 in the Crypt, which is under the Rotunda
  • 2:43: USER 2 messages Dresch that, Patriots are in the Capitol building now”
  • 2:44: Dresch responds to USER 2: I am, with picture of Capitol Visitor’s Center
  • 2:48: USER 2 messages Dresch that, “Word is police are getting ready to use teach gas.
  • 2:48: Dresch responds, “Been using it. Mask up.”
  • 3:13: Dresch posts, “Who’s house? OUR HOUSE!”
  • 3:14: Dresch posts Picture 3 with caption, “We are in”
  • 4:46: Dresch responds to comments saying “It was peaceful … still got a lil gas tho … mask on for safety
  • 5:17, 5:18: Dresch sends USER 3 two pictures with the caption, “That’s right outside the house of representative … we got in! Took a lil gas … wtf I love masks now!” Had the cops booking it”
  • 6:09: Dresch responds to comments saying, “we broke no glass no shoving I seen”
  • 8:32: Dresch posts crowd at Washington Monument, “Total Victory!”
  • 8:44: Dresch posts “I’m excited”
  • January 7, 12:11 AM: Dresch posts image from Visitor’s Center stating that “antifa did not take the capitol. that was Patriots. … those traitors Know who’s really in charge”
  • 8:32PM: Dresch posts to another post, “Mike Pence gave our country to the communist hordes, traitor scum like the rest of them, we have your back give the word and we will be back even stronger”

January 15: FBI obtains arrest warrant for Dresch

January 19: FBI surveils Dresch’s residence and then arrests him outside it, searches his home, finding:

  • A Motorola that may be a Moto e6
  • A bag that Dresch had with him in one of the photos he posted to Facebook, including:
    • A receipt from a hotel in Washington DC (no date described)
    • Eight boxes of ammunition
    • A CB radio
    • A Whistler laser/radar detector
    • A DC Metro Pass
    • A hotel receipt for a hotel in Chantilly, VA for arrival on January 5 and departure on January 7
  • A Russian SKS-type rifle with a bayonet
  • A shotgun

January 22: Because of prior felony involving evading arrest, Dresch detained pending trial

March 3: Warrant obtained

March 4: Warrant executed

image_print
24 replies
  1. John Paul Jones says:

    Eight boxes of ammo is a lot of reloads; and no reason to carry it unless you also had a weapon with you; and you also had spare clips to put the ammo in. The Sheriff’s report is interesting too. “Minor nuisance calls” could be a lot of things, but it sounds like some of his neighbours don’t particularly like or trust him, or his guns.

    • Zinsky says:

      Exactly. The sheriff’s description of the son’s outspokenness is revealing too. How can he make this claim unless he has been made aware of Dresch’s propensity to air his political beliefs in public? The son sounds like your typical uncouth, loudmouth backwoods redneck. A good friend of mine lives in Marquette in the UP. While Marquette is quite liberal because of the university there, the rural areas around it have some extreme right-wing, gun goon types that live in the woods and imbibe nothing but conservative AM talk radio and massive quantities of beer. The fact he only had two firearms suggests a lower socioeconomic status, as many of these backwoods militia types have as many guns as they can afford.

    • Ginevra diBenci says:

      Interesting that the sheriff would argue against pretrial detention for a guy with a felony conviction for a high speed chase to resist arrest. Especially when those “minor nuisance complaints” smell like a major-league asshole with a sheriff who liked his dad covering for him. I love Houghton County–Hemingway country–but White men have a lot of acreage and entrenched beliefs that permit them to get twisted up there.

    • JohnJ says:

      The sheriff is showing the precise example of a the “good ol’ boy” system.

      “I know Karl, he’s a good ol’ boy. He wouldn’t hurt nobody”

  2. PieIsDamnGood says:

    I realize a lot of things have happened since Trump issued pardons but I’m still very interested in reading your thoughts on how he fucked those up.

      • Norskeflamthrower says:

        “…on first look this is bullshit.”

        Please, a concise explanation from EW’s omniscient arbiter of truth.

        • John Paul Jones says:

          Lawfare took a run at the question a couple of weeks back, when Bennie Thompson launched his suit under the same statute.
          https://www.lawfareblog.com/suing-trump-over-capitol-riot-preliminary-assessment
          From the last couple of paragraphs –
          “The available facts may ultimately only be able to show that Trump and Giuliani were reckless or negligent in whipping up the mob they had helped to assemble with these sorts of remarks. Courts differ on the extent to which recklessness and negligence can be used to establish vicarious liability, making this a possible part of their defense.”

        • Norskeflamthrower says:

          “The available facts may ultimately only be able to show…”

          Yes, and the “available facts” MAY in fact prove conspiracy to commit insurrection. That is why Swalwell’s suit, if it goes forward, is so much more effective in potentially getting to where the DOJ can’t right now. I still haven’t seen anything that convinces me that this suit is “bullshit”, in fact a sitting congressman filling a civil suit is the best way to get the facts that are needed.

        • bmaz says:

          And I have not seen anything that convinces me it is “not” complete bullshit. Let me know if Swalwell even gets close to getting discovery. Because that likely never happens.

        • Norskeflamthrower says:

          Thank you for the opinion, and if you are correct that the odds don’t favor then it is another example of what hasta be fixed in our justice system.

        • PhoneInducedPinkEye says:

          Alternatively congress could use their oversight powers, ramp up staff and investigator hires, have competent questioners at hearings, and issue subpoenas.

    • Savage Librarian says:

      Swalwell’s suit is similar to labor law disputes. His has 3 parts: interference with Congress’ performance of official duties, interference with Swalwell’s well-being and also the well-being of others. Even if only one of the claims in this complaint survives a motion to dismiss, then there is an opportunity for depositions. That would be juicy. But, we should find out before too long whether or not it will proceed.

      • Savage Librarian says:

        It might even tie into some of this:

        “FBI Finds Contact Between Proud Boys Member and Trump Associate Before Capitol Riot” – The New York Times, Katie Bennett, Alan Feuer, Adam Goldman – 3/5/21

        “A member of the far-right nationalist Proud Boys was in communication with a person associated with the White House in the days just before the Jan. 6 assault on the Capitol, according to a law enforcement official briefed on the investigation.”
        …..
        “Although investigators have found no contact between the rioters and members of Congress during the attack, those records have shown evidence in the days leading up to Jan. 6 of communications between far-right extremists and lawmakers who were planning to appear at the rally featuring Mr. Trump that occurred just before the assault, according to one of the officials.”

        “The Justice Department is examining those communications, but it has not opened investigations into any members, the official said. A department spokesman declined to comment.”
        …..
        “It is also looking at possible charges of seditious conspiracy, according to two people familiar with the investigation.”

        https://www.nytimes.com/2021/03/05/us/politics/trump-proud-boys-capitol-riot.html

  3. RacerX says:

    Excellent piece, as usual! Found one typo in paragraph 2: “…2013 arrest and felony conviction for a high speech chase” s/b “…high speed chase.”

  4. Lex says:

    The link on yoopers has a grave error. You are only allowed Yooper status if you’re born here. They’re pretty uptight about it. You can get away with calling yourself one to trolls and such, but an actual Yooper who hears it will almost certainly question and call you out. Also, that houghton co sheriff sounds like just the sort of backwoods bullshit that’s the norm here in “god’s area code”.

      • bmaz says:

        No, a high speed chase is most certainly NOT an “admission of guilt”. Frankly it may, or may not even really be a felony. I’d like to see the sentencing paperwork on that.

        This guy may, or may not, be an asshole, but he should be given pre-trial release.

  5. madwand says:

    January 7, 12:11 AM: Dresch posts image from Visitor’s Center stating that “antifa did not take the capitol. that was Patriots. … those traitors Know who’s really in charge”

    Send that to Ron Johnson and tell him to update his information.

  6. Eureka says:

    This one’s OT for rosalind, about a concert/festival production company that has rehired workers to build vaccine/testing sites (different aspect to her post of putting knowledgeable people back to work for our current problems):

    Massive drive-through vaccination center being built in King of Prussia — with no guarantee the state will give it vaccine
    https://www.inquirer.com/health/coronavirus/covid-vaccination-center-king-of-prussia-mountain-productions-firefly-festival-20210228.html

Comments are closed.