The Known and Likely Content of Trump’s Search Warrant

Yesterday, Magistrate Judge Bruce Reinhart found that, “the Government has not met its burden of showing that the entire [Trump search warrant] affidavit should remain sealed.” He ordered DOJ to provide a sealed version of proposed redactions for the warrant affidavit for Trump’s search by August 25 at noon.

Two days after the search of Mar-a-Lago I did a post laying out the likely content of what’s in that search warrant (which pretty accurately predicted what we’ve seen since). Because a warrant affidavit is one of the best ways to show how DOJ and the FBI think of the events of the last 18 months, I wanted to do a second version including all the things we have learned since.

For comparison, here are the warrants for Reality Winner and Josh Schulte, both of which were also, at least in part, warrants for a 793 investigation. Here are warrants to search Roger Stone and Oath Keeper Jeremy Brown’s houses, both Federal searches in Florida related to investigations conducted in DC (the search of Brown’s house even found allegedly classified documents, albeit only at the Secret level). Stone’s showed probable cause for a different part of the obstruction statute. Here’s the warrant Robert Mueller’s team used to get Michael Cohen’s Trump Organization emails from Microsoft.

Cover Sheet to Warrant Application

[link]

This cover sheet shows that DOJ swore out the affidavit to Magistrate Judge Bruce Reinhart over WhatsApp, who signed it on August 5.

It describes applying for a warrant to search for evidence of crimes and for contraband (a reference to the illegally possessed Presidential records). It doesn’t permit the seizure of property used in the commission of a crime so, unsurprisingly, the FBI didn’t have authority to seize Mar-a-Lago.

The cover sheet describes the three crimes under investigation this way.

The Search Warrant

[link]

The search warrant notes the docket number 22-mj-8332 that the entire country has been watching for 10 days now.

The search warrant authorizes the FBI to conduct a search of 1100 S. Ocean Blvd., Palm Beach, FL.

It was signed by Reinhart, who was the Duty Magistrate, at 12:12PM on August 5.

The warrant gave the FBI two weeks, until August 19, to conduct the search and limited the search to daytime hours (defined as 6AM to 10PM, which Trumpsters often complain amounts to a pre-dawn raid).

Attachment A

[link]

Attachment A describes Mar-a-Lago as a “resort, club, and residence” with approximately 58 bedrooms and 33 bathrooms. The warrant permitted the FBI to search all parts of Mar-a-Lago accessible to Trump (whom they refer to as FPOTUS) and his staff, except those currently occupied (at the time of the search) by Members or guests. It mentioned the “45 Office” explicitly and storage rooms, but did not describe the storage room at the center of much reporting on the search.

Attachment B

[link]

Attachment B authorized the FBI to seize “documents and records constituting evidence, contraband, fruits of crime, or other items illegally possessed” in violation of 18 USC 793, 18 USC 2071, or 18 USC 1519.

This post describes the search protocol authorized in Attachment B, with nifty graphic.

Return

Search warrant forms have a return form (describing what was seized) included in them. But here, the FBI provided that list to Trump in the form of two receipts, one signed by a Supervisory Special Agent, and one signed by a Special Agent; I’ve dubbed the latter the “CLASS receipt,” because all the classified documents described are included on that one.

The receipt lists:

  • 27 boxes, one of which is described as leatherbound; 11 are described to contain documents marked classified
  • Executive grant of clemency for Roger Stone
  • Potential Presidential record
  • 2 binders of photos
  • Handwritten note
  • Other documents catalogued on the SSA receipt

See these two posts for more on the significance of the two different receipts.

Christina Bobb signed for both receipts at 6:19PM on August 8.

Affidavit

This would start with:

  • Several paragraphs describing the affiant’s background and training
  • An assertion that the affiant believed there was probable cause that the FBI would find evidence of violations of 18 USC 793, 18 USC 2071, and 18 USC 1519 at Mar-a-Lago.

Particularly given the novel legal issues implicating a search of the former President, I think there’s likely a section describing the statutes involved. It’s likely to include:

Note: If there’s a version of this statutory language, it may be among the things DOJ would acquiesce to releasing, particularly if it implied that Trump was under investigation for stealing nuclear documents. But they might be unwilling to do that if they’re not yet sure they’ve gotten all known nuclear documents back. 

Then there’d be a section describing who was involved (the Roger Stone warrant has such paragraphs). There will be a paragraph about Trump that looks like:

Donald J. Trump (Former President of the United States, FPOTUS) is a businessman who owns and resides at 1100 S. Ocean Blvd., Palm Beach, FL. From January 20, 2017 at 12:00PM until January 20, 2021 at 12:00PM, he was the President of the United States. He ceased exercising the constitutional authorities of the President at 12:00PM on January 20, 2021. On February 5, 2021, the current President of the United States, Joe Biden, discontinued classified briefings for FPOTUS.

In addition, there are likely descriptions of the National Archives and its statutory duties.

There may be descriptions of Patrick Philbin, Pat Cipollone, Mark Meadows (all of whom were involved in negotiations with NARA over retrieving the documents), anyone caught on surveillance video entering or exiting the storage closet, of Kash Patel and John Solomon (including past security concerns raised about both), and the Trump lawyers involved in the June meeting.

There may be a paragraph describing MAL in more depth. It might describe the SCIF used during Trump’s presidency and its apparent removal. It might describe the arrest and prosecution of Yujing Zhang, who breached MAL and might include other known foreign intelligence targeting of MAL. It might describe Trump’s refusal to use secure facilities at MAL, including a 2017 meeting with Shinzo Abe, though it would likely rely on public reports for this, not classified intelligence. It might describe the tunnels underneath and — and the public availability of historic diagrams of them. It might describe the known employees at MAL, including any foreign citizens. Finally, it might describe both the terms of membership and the ease with which others could access the golf club.

Timeline

The rest is probably a timeline of the investigation. The following known details are likely to appear.

On December 30, 2020, DOJ provided Trump a binder of material from the Russian investigation.

On January 8, 2021, Mike Ellis attempted to retain a compartmented NSA report for White House archives, initially refusing efforts to return it.

On January 14, 2021, the White House returned the compartmented NSA report to NSA.

On January 17, 2021, the FBI provided a list of continuing objections to Trump’s declassification of Crossfire Hurricane materials.

On January 19, 2021, via letter to Archivist of the United States David Ferriero, FPOTUS designated (among others) Pasquale (Pat) Cipollone and Patrick Philbin as his representatives with the NARA.

On January 19, 2021, FPOTUS wrote a letter authorizing the declassification of records pertaining to FBI’s investigation into Russian ties with FPOTUS’ campaign that had not yet been declassified. Patel later described the materials to include:

transcripts of intercepts made by the FBI of Trump aides, a declassified copy of the final FISA warrant approved by an intelligence court, and the tasking orders and debriefings of the two main confidential human sources, Christopher Steele and Stefan Halper, the bureau used to investigate whether Trump had colluded with Russia to steal the 2016 election.

Patel’s description appears to conflict with Trump’s order, which explicitly, “does not extend to materials that must be protected from disclosure pursuant to orders of the Foreign Intelligence Surveillance Court.”

On January 20, 2021, Meadows sent “The Attorney General” a memo, citing the January 19 order from FPOTUS, ordering “the Department must expeditiously conduct a Privacy Act review under the standards that the Department of Justice would normally apply, redact material appropriately, and release the remaining material with redactions applied.”

On January 20, 2021, FPOTUS ceased exercising the authorities of the President of the United States.

On January XX, records deemed to be the final production of Presidential Records arrived at NARA.

The affidavit would describe the inventorying process and then describe known documents that were not included.

  • Love letters from Kim Jong Un
  • Altered map of Hurricane Dorian

It would also include a description of evidence of document destruction, including any evidence those records pertained to a Congressional investigation, impeachment, or a criminal investigation.

Starting on May 6, 2021, NARA General Counsel Gary Stern communicated with Philbin regarding the missing records. [This will cite the date of each communication and quote anything that captures Trump’s refusal to return the documents.]

Having not secured identified records, starting in Fall 2021, Stern communicated with Trump attorney (probably Cipollone) to arrange turning over the records.

October 18, 2021: Trump sues to prevent the Archives from complying with January 6 Committee subpoena.

November 10, 2021: Judge Tanya Chutkan denies Trump’s motion for an injunction against NARA. (While it wouldn’t appear in the affidavit, in recent days Paul Sperry has claimed that Trump withheld documents to prevent NARA from turning them over to the January 6 Committee.)

On December XX, 2021, XX informed NARA certain missing records had been located.

December 9, 2021: DC Circuit upholds Judge Chutkan’s decision releasing Trump records to the January 6 Committee.

On January 17, 2022, NARA retrieved 15 boxes of Records from 1100 S. Ocean Blvd, Palm Beach, FL.

January 19, 2022: SCOTUS upholds Chutkan’s decision.

On January 31, 2022, NARA completed an initial inventory of the retrieved documents. It discovered over 100 documents with classification markings, comprising more than 700 pages. Some include the highest levels of classification, including Special Access Program (SAP) material.

On February xx (possibly February 8), 2022, NARA reported FPOTUS’ failures to comply with the Presidential Records Act to the Department of Justice and requested an investigation.

DOJ and FBI likely conducted interviews between February and May, which would be listed.

On April 11, 2022, Biden’s White House Counsel instructed NARA provide FBI access to the 15 boxes of materials returned from Mar-a-Lago.

On April 12, 2022, NARA instructed the Trump team of that decision, and informing him that the FBI would start to access the documents on April 18.

On April XX, Trump’s attorneys ask the White House counsel for more time before the review of the documents; Biden extends the date to April 29.

On May 5, 2022, Corcoran proposed reviewing the records at NARA.

On May 5, 2022, Kash Patel made public claims that the contents of materials returned to NARA had been declassified, describing that FPOTUS wanted to release,

information that Trump felt spoke to matters regarding everything from Russiagate to the Ukraine impeachment fiasco to major national security matters of great public importance — anything the president felt the American people had a right to know is in there and more.

FBI conducted early interviews during this period, likely including Philbin, Scott Gast, Derek Lyons, and Cipollone, and possibly Mark Meadows. Philbin and Cipollone would have described their own inspections of records, including their knowledge that identified missing records had been at MAL when they had conducted records searches.

FBI would include multiple interviews of people describing Trump saying the Presidential Records belonged to him.

On May 10, 2022, Acting Archivist informed Evan Corcoran the FBI would get access to the records on May 12.

On May 11, 2022, FBI subpoenaed Trump for documents remaining at Mar-a-Lago bearing classification marks.

On May 12, pursuant to a subpoena, FBI accessed the 15 boxes turned over in January.

From May 16-18, FBI conducted a preliminary review of. the documents and discovered:

  • 67 Confidential documents
  • 92 Secret documents
  • 25 Top Secret documents
  • Documents marked HCS, FISA, ORCON, NOFORN, and SI
  • Handwritten notes

On May XX, 2022, DOJ subpoenaed FPOTUS for any remaining documents bearing classification marks.

Surveillance video from this period, later obtained with a subpoena, showed people moving documents in and out of the storage room. The people and dates would be included.

On June 3, 2022, Jay Bratt and three investigators met with Evan Corcoran and Christina Bobb to collect the subpoenaed materials.

  • FPOTUS joined the meeting and acknowledged the effort to retrieve classified materials.
  • Bobb and Corcoran provided XX documents marked with classification marks.
  • One of the lawyers signed an attestation that all classified documents had been turned over.
  • Bratt informed Bobb and Corcoran all records covered by the Presidential and Federal Records Act were US government property.
  • Bratt informed Bobb and Corcoran about the regulations guiding storage of classified records.
  • Bratt and investigators inspect storage facility, find storage facility fails to meet required standards for storage.

On June 8, Bratt emailed Corcoran. He said, in part, that,

We ask that the room at Mar-a-Lago where the documents had been stored be secured and that all the boxes that were moved from the White House to Mar-a-Lago (along with any other items in that room) be preserved in that room in their current condition until further notice

It’s likely either at the meeting on June 3 or in the email, Bratt also informed Corcoran that the storage closet did not comply with CFR guidelines.

On June 9, Corcoran wrote saying only, “I write to acknowledge receipt of this letter.”

On June 19, FPOTUS sent a letter to NARA designating Patel and Solomon as representatives to access “Presidential records of my administration.”

NARA, possibly Gary Stern, likely informed DOJ of the designation of Patel and Solomon and (probably) Trump’s reference to “Presidential records,” generally, not records at NARA.

On June 22, DOJ subpoenaed surveillance video of the storage closet for a 60-day period. Analysis of the video showed uncleared people entering in and out of the storage closet.

DOJ likely had follow-up interviews after the Bratt meeting and the surveillance video return, in part to identify who had access to the storage closet and to identify documents believed to remain outstanding.

The affidavit would include a description of known documents that remain extant, including documents that were altered or mutilated (perhaps transcripts of Trump’s meetings with Russia) and known classified documents, including those pertaining to nuclear weapons. 

Finally, the affidavit would include a conclusion stating that all this amounts to probable cause that Trump was in possession of documents that were covered by the PRA, some subset of which were believed to be classified and some other subset of which had either been hidden or damaged in an effort to obstruct either this or other investigations.

emptywheel Trump Espionage coverage

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

18 USC 793e in the Time of Shadow Brokers and Donald Trump

[from Rayne] Other Possible Classified Materials in Trump’s Safe

Trump’s Stolen Documents

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

[from Peterr] Merrick Garland Preaches to an Overseas Audience

Three Ways Merrick Garland and DOJ Spoke of Trump as if He Might Be Indicted

The Legal and Political Significance of Nuclear Document[s] Trump Is Suspected to Have Stolen

Merrick Garland Calls Trump’s Bluff

Trump Keeps Using the Word “Cooperate.” I Do Not Think That Word Means What Trump Wants the Press To Think It Means

[from Rayne] Expected Response is Expected: Trump and Right-Wing DARVO

DOJ’s June Mar-a-Lago Trip Helps Prove 18 USC 793e

The Likely Content of a Trump Search Affidavit

All Republican Gang of Eight Members Condone Large-Scale Theft of Classified Information, Press Yawns

Some Likely Exacerbating Factors that Would Contribute to a Trump Search

FBI Executes a Search Warrant at 1100 S Ocean Blvd, Palm Beach, FL 33480

The ABCs (and Provisions e, f, and g) of the Espionage Act

Trump’s Latest Tirade Proves Any Temporary Restraining Order May Come Too Late

How Trump’s Search Worked, with Nifty Graphic

Pat Philbin Knows Why the Bodies Are Buried

Rule of Law: DOJ Obtained Trump’s Privilege-Waived Documents in May

The French President May Be Contained Inside the Roger Stone Clemency

Which of the Many Investigations Trump Has Obstructed Is DOJ Investigating?

The Known and Likely Content of Trump’s Search Warrant

Share this entry

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

Yesterday, I observed that the FBI gave the former President two different receipts for the search on his golf resort.

There’s the one consisting of five boxes and a separate category, “Documents,” not associated with any boxes, signed by the Supervisory Special Agent. There are no classified documents described. I’ll refer to that as the SSA Receipt in this post.

Then there’s the one that consists of 27 items, mostly boxes, many with sub-items, which are often descriptions of the kinds of classified documents contained in the box or the leather case they were seized in. It was signed by a Special Agent. I’ll refer to that as the CLASS Receipt in this post.

I suggested that one explanation for providing Trump two separate receipts might be if the SSA receipt covered evidence showing Trump violated 18 USC 1519, destruction, alteration, or falsification of records in Federal investigations, and the CLASS receipt covered evidence showing Trump violated 18 USC 793, retaining national defense information under the Espionage Act. I argued the two receipts would cover evidence responsive to crimes that might be charged in different venues, DC for the obstruction charge and SDFL for the Espionage charge.

The third statute on Trump’s warrant, 18 USC 2071, removal of official records would cover everything covered by the Presidential Records Act and would generally backstop everything seized under the other two statutes. It covers both. Consider it an umbrella charge.

Today Trump, in the form of a post on Truth Social and related stories shared to Trump-friendly media, has confirmed I’m right that there’s significance to the two separate receipts.

Trump-friendly outlets have explained that “the former president’s team was informed” that the materials seized via what I’ve called the SSA receipt “contain information covered by attorney-client privilege” but that DOJ “opposed Trump lawyers’ request for the appointment of an independent, special master to review the records.”

The FBI seized boxes containing records covered by attorney-client privilege and potentially executive privilege during its raid of former President Trump’s Mar-a-Lago home, sources familiar with the investigation told Fox News, adding that the Justice Department opposed Trump lawyers’ request for the appointment of an independent, special master to review the records.

Sources familiar with the investigation told Fox News Saturday that the former president’s team was informed that boxes labeled A-14, A-26, A-43, A-13, A-33, and a set of documents—all seen on the final page of the FBI’s property receipt —contained information covered by attorney-client privilege.

[snip]

Sources told Fox News that some records could be covered by executive privilege, which gives the president of the United States and other officials within the executive branch the authority to withhold certain sensitive forms of advice and consultation between the president and senior advisers.

I believe there must be some truth to this because if Trump were making completely unsubstantiated claims, he would have made it more generally, claiming that all the boxes must include attorney-client privileged material. Furthermore, Trump’s claims to have watched the search via CCTV notwithstanding, it is highly unlikely Trump has CCTV coverage of his own office, bedroom, and a random storage closet such that he would know what’s in box A-14 (and so on the SSA receipt) versus what’s in box A-15 (which was on the CLASS receipt). Someone who knows the outcome of the search told Trump that one set, but not the other, has materials that are attorney-client privileged. That has to come from the government.

That doesn’t mean my larger hypothesis — that one receipt covered violations of the Espionage Act and the other covered obstruction — has been vindicated. On the contrary, DOJ may simply have chosen to put all records that include an attorney-client claim on a separate receipt so that, if Trump obtains a competent lawyer and demands the Special Master review he’s making a half-hearted request for now, DOJ can move forward with all the other evidence without a 9-month delay like the Special Master review of Rudy Giuliani’s phones necessitated. It would be a clever way of dealing with a very sensitive legal issue.

But I don’t think it’s as simple as that either. Bizarrely, Trump knows something about those boxes such that he’s trying to claim Executive Privilege, in addition to attorney-client privilege.

It’s a nonsense claim, legally. Probably every single box seized last Monday has materials covered by Executive Privilege in them, because every single box would include communications directly with Trump. But there is absolutely no basis for any EP claim for a single thing seized from Mar-a-Lago because the Presidential Records Act underlying the seizure is designed, specifically and especially, to make sure all the EP materials are preserved for history. It’s one of the reasons his refusal to turn over the materials that the Archives were asking for specifically is so insanely stupid, because it gave FBI no choice but to come seize this stuff. Trump’s not making an EP claim to try to delay DOJ’s access to the 27 items, which are mostly boxes, on the CLASS receipt. So he must have learned something about the materials itemized in the SSA receipt to which, in a frantic and transparently silly effort, he’s trying to delay DOJ’s access.

Trump’s announcement that the material on the SSA receipt seems to rule out another possible explanation for the SSA receipt I had been pondering, that it covered the materials that were particularly sensitive from a national security perspective, such as the information on nuclear weapons.

And it doesn’t rule out my hypothesis that that material was seized in the obstruction investigation. Indeed, in two ways, it might corroborate my hypothesis.

There are two theories of the 1519 charge. One, which NYU’s Ryan Goodman is championing, suspects it is about the investigation into Mar-a-Lago, criminalizing the effort in June to withhold materials. If that were the significance of the 1519 charge, separating out the communications between lawyers and NARA and DOJ might make sense, since those would be communications into this investigation. That said, there’d be no basis for an EP claim for any of that, since it all post-dated Trump’s ouster. And as soon as DOJ confirmed that some classified material had been knowingly withheld in June when his lawyers told DOJ that it was all turned over, there’d be a crime-fraud exception for those materials.

My theory of the 1519 charge — that it arose out of NARA’s discovery that Trump had attempted to destroy materials subpoenaed in past and present investigations — would similarly be likely to have attorney-client privileged documents. Take a few examples:

  • One thing Trump is likely to have withheld is the Perfect Transcript between him and Volodymyr Zelenskyy, which is something Congress was entitled to get during impeachment. That transcript was hidden from Congress by White House lawyer John Eisenberg, among other lawyers, thereby according the transcript a weak privilege claim, but one easily overcome by the obstructive nature of the choice to withhold it.
  • Another set of things we know were withheld from several investigations were documents showing sustained communications with Russia that should have been turned over by the Trump Organization. The most provable of those were the communications between Michael Cohen and Dmitri Peskov’s office in January 2016 (Mueller got his own copy via Microsoft). There’s probably correspondence regarding an invite Russian Deputy Prime Minister Sergei Prikhodko extended to Trump to attend Putin’s St. Petersburg Economic Forum in June 2016. The Trump Organization did not produce to SSCI the copy of Paul Manafort’s Securing the Victory email he sent to Rhona Graff. The subpoena response on all these issues was handled by Trump’s corporate lawyers, Alan Futerfas and Alan Garten, and so would be privileged — but also crime-fraud excepted — evidence that Trump obstructed various Russian investigations.
  • While one draft of Trump’s termination letter to Jim Comey was ultimately turned over to Mueller (after reports that the only extant copy was one preserved by DOJ lawyers), the Mueller Report narrative surrounding it makes it clear that Trump and Stephen Miller worked over several drafts before the one shared with others. Those earlier drafts were likely not turned over, in part because White House Counsel lawyers advised Trump that these drafts should “[n]ot [see the] light of day.” Again, that’s legal advice, but also proof of documents that were illegally withheld from the Mueller investigation.
  • I don’t want to even imagine what advice from Rudy Giuliani that Trump has withheld from various investigations, particularly pertaining to January 6. Most of that would be (shitty) legal advice. If it was also withheld from proper investigations, though, it’d also be proof of obstruction under 18 USC 1519.

In other words, aside from the documents Trump tried to rip up or eat or flush, many of Trump’s known violations of 18 USC 1519 would involve lawyers directly. Virtually every investigation into Trump was stymied by improper decisions by lawyers. And those withheld documents would once have been privileged, but they’d also be solid proof of obstruction.

And if Trump had reason to believe that DOJ, after predicating an investigation on all the evidence Trump had tried to rip up or eat or flush evidence, had sought and seized all the attorney-client protected materials that had insulated Trump from consequences for his past actions, it might explain one of the biggest puzzles from the last week. For some reason, Trump has worked far harder to obscure that this obstruction investigation exists than that he’s under investigation for a crime with the word “Espionage” in the title. For some reason, Trump is more afraid of the obstruction investigation than the Espionage Act investigation.

One possible explanation for that is that he fears the other secrets he’s been keeping more than proof that he stole a bunch of otherwise innocuous Top Secret documents.

Perhaps the most interesting thing about this latest complaint — first voiced on the 7th day after the search — is it shows that DOJ is in contact with someone presenting themself as Trump’s lawyer.

That’s not surprising. DOJ informed Trump of the search. Even for a simple criminal case into attempting to steal the election (assuming Trump could find someone who would confess to be his lawyer), DOJ would want to have discussions about how to proceed.

In this case, however, the crimes under investigation include, at a minimum, violations of the Espionage Act. DOJ always tries to find a way to resolve those from the get-go, because prosecutions about stolen classified information are always damaging to the equities you’re trying to protect. That’s all the more true in the unprecedented case where the suspect is the former President. At a minimum, DOJ likely has or will float Trump the offer of an offramp like an 18 USC 2701 guilty plea if he cooperates to tell the government about the whereabouts of all the classified documents he stole.

And if what Trump is trying to hide in the obstruction investigation is even more damning, as his behavior suggests it might be, DOJ might actually have enough leverage to make Donny to consider such an offer.

Still, the legal quiet has been making me nervous. I have been waiting all week for a docket to spring up with a Trump motion for a Temporary Restraining Order stalling any access to these files.

For comparison, the docket on a similar challenge from Michael Cohen in 2018 was created just 4 days after the search of his residences, and the discussions about the search began that same day.

On the same day as the seizures (April 9, 2018), the undersigned counsel requested in writing that the U.S. Attorney’s Office for the SDNY return all of the seized property and allow Mr. Cohen and his attorneys the opportunity to screen the materials for privilege, produce any relevant, non-privileged documents to the government, and provide a log of any documents withheld on privilege grounds. Id., ¶ 32, Ex. A. On Wednesday, April 11, 2018, the government responded by letter, rejecting defense counsel’s proposal and informing defense counsel that the government would begin to review the materials at noon on Friday, April 13, 2018. Id. ¶ 33, Ex. B. Accordingly, Mr. Cohen hereby moves for immediate injunctive and equitable relief seeking the opportunity to have his counsel review the seized documents in the first instance, before any review by any law enforcement personnel, for privilege and responsiveness, and, if the Court believes it necessary, for the appointment of a Special Master to supervise that review process.

Trump moved to intervene that same day, April 13, just four days after the seizures.

In the case of the search on Rudy’s phones, SDNY itself asked for a Special Master the next day (though Trump never intervened).

There have to be similar discussions going on now. There just have to be. Trump’s paucity of lawyers — and the conflict posed by the possibility that Evan Corcoran, his most competent current defense attorney, may be conflicted out by dint of having signed an affirmation that Trump turned over all his classified documents in June — cannot explain a full week delay.

But thus far, in spite of every media outlet and their mother filing motions to unseal the search affidavit itself, no one has started pushing to unseal an inevitable fight over access to the seized material. (Again, by comparison, the NYT filed to intervene the day the Cohen warrant docket was made public.)

So for whatever reasons, a full week has elapsed since a lawful search executed on the golf resort of the former President and the first we’re learning about legal discussions — aside from NYT’s revelation that Trump made a veiled threat against Merrick Garland on Thursday — is Trump’s complaint covering just the documents that don’t seem to implicate the Espionage Act.

Something has caused that discussion to remain sealed. And that, by itself, is remarkable.

Update: As klynn reminds in comments, another document that the Trump White House altered was the MemCon of the meeting between Trump and Sergey Lavrov in which he gave the Russians highly sensitive intelligence. I laid out what we know of that alteration, the fall-out, and Mueller’s investigation into it here. If my theory about the SSA receipt is right, that any remaining unaltered record of the meeting found at MAL would be on the SSA receipt. Except the alterations, in this case, are not yet known to involve an attorney, so would not be attorney-client privileged.

emptywheel Trump Espionage coverage

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

18 USC 793e in the Time of Shadow Brokers and Donald Trump

[from Rayne] Other Possible Classified Materials in Trump’s Safe

Trump’s Stolen Documents

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

[from Peterr] Merrick Garland Preaches to an Overseas Audience

Three Ways Merrick Garland and DOJ Spoke of Trump as if He Might Be Indicted

The Legal and Political Significance of Nuclear Document[s] Trump Is Suspected to Have Stolen

Merrick Garland Calls Trump’s Bluff

Trump Keeps Using the Word “Cooperate.” I Do Not Think That Word Means What Trump Wants the Press To Think It Means

[from Rayne] Expected Response is Expected: Trump and Right-Wing DARVO

DOJ’s June Mar-a-Lago Trip Helps Prove 18 USC 793e

The Likely Content of a Trump Search Affidavit

All Republican Gang of Eight Members Condone Large-Scale Theft of Classified Information, Press Yawns

Some Likely Exacerbating Factors that Would Contribute to a Trump Search

FBI Executes a Search Warrant at 1100 S Ocean Blvd, Palm Beach, FL 33480

Share this entry
[Photo: National Security Agency, Ft. Meade, MD via Wikimedia]

18 USC 793e in the Time of Shadow Brokers and Donald Trump

Late last year, a Foreign Affairs article by former Principal Deputy Director of National Intelligence Sue Gordon and former DOD Chief of Staff Eric Rosenbach asserted that the files leaked in 2016 and 2017 by Shadow Brokers came from two NSA officers who brought the files home from work.

In two separate incidents, employees of an NSA unit that was then known as the Office of Tailored Access Operations—an outfit that conducts the agency’s most sensitive cybersurveillance operations—removed extremely powerful tools from top-secret NSA networks and, incredibly, took them home. Eventually, the Shadow Brokers—a mysterious hacking group with ties to Russian intelligence services—got their hands on some of the NSA tools and released them on the Internet. As one former TAO employee told The Washington Post, these were “the keys to the kingdom”—digital tools that would “undermine the security of a lot of major government and corporate networks both here and abroad.”

One such tool, known as “EternalBlue,” got into the wrong hands and has been used to unleash a scourge of ransomware attacks—in which hackers paralyze computer systems until their demands are met—that will plague the world for years to come. Two of the most destructive cyberattacks in history made use of tools that were based on EternalBlue: the so-called WannaCry attack, launched by North Korea in 2017, which caused major disruptions at the British National Health Service for at least a week, and the NotPetya attack, carried out that same year by Russian-backed operatives, which resulted in more than $10 billion in damage to the global economy and caused weeks of delays at the world’s largest shipping company, Maersk. [my emphasis]

That statement certainly doesn’t amount to official confirmation that that’s where the files came from (and I’ve been told that the scope of the files released by Shadow Brokers would have required at least one more source). But the piece is as close as anyone with direct knowledge of the matter — as Gordon would have had from the aftermath — has come to confirming on the record what several strands of reporting had laid out in 2016 and 2017: that the NSA files that were leaked and then redeployed in two devastating global cyberattacks came from two guys who brought highly classified files home from the NSA.

The two men in question, Nghia Pho and Hal Martin, were prosecuted under 18 USC 793e, likely the same part of the Espionage Act under which the former President is being investigated. Pho (who was prosecuted by Thomas Windom, one of the prosecutors currently leading the fake elector investigation) pled guilty in 2017 and was sentenced to 66 months in prison; he is processing through re-entry for release next month. Martin pled guilty in 2019 and was sentenced to 108 months in prison.

The government never formally claimed that either man caused hostile powers to obtain these files, much less voluntarily gave them to foreign actors. Yet it used 793e to hold them accountable for the damage their negligence caused.

There has never been any explanation of how the files from Martin would have gotten to the still unidentified entity that released them.

But there is part of an explanation how files from Pho got stolen. WSJ reported in 2017 that the Kaspersky Anti-Virus software Pho was running on his home computer led the Russian security firm to discover that Pho had the NSA’s hacking tools on the machine. Somehow (the implication is that Kaspersky alerted the Russian government) that discovery led Russian hackers to subsequently target Pho’s computer and steal the files. In response to the WSJ report, Kaspersky issued their own report (here’s a summary from Kim Zetter). It acknowledged that Kaspersky AV had pulled in NSA tools after triggering on a known indicator of NSA compromise (the report claimed, and you can choose to believe that or not, that Kaspersky had deleted the most interesting parts of the files obtained). But it also revealed that in that same period, Pho had briefly disabled his Kaspersky AV and downloaded a pirated copy of Microsoft Office, which led to at least one backdoor being loaded onto his computer via which hostile actors would have been able to steal the NSA’s crown jewels.

Whichever version of the story you believe, both confirm that Kaspersky AV provided a way to identify a computer storing known NSA hacking tools, which then led Pho — someone of sufficient seniority to be profiled by foreign intelligence services — to be targeted for compromise. Pho didn’t have to give the files he brought home from work to Russia and other malicious foreign entities. Merely by loading them onto his inadequately protected computer and doing a couple of other irresponsible things, he made the files available to be stolen and then used in one of the most devastating information operations in history. Pho’s own inconsistent motives didn’t matter; what mattered was that actions he took made it easy for malicious actors to pull off the kind of spying coup that normally takes recruiting a high-placed spy like Robert Hanssen or Aldrich Ames.

In the aftermath of the Shadow Brokers investigation, the government’s counterintelligence investigators may have begun to place more weight on the gravity of merely bringing home sensitive files, independent of any decision to share them with journalists or spies.

Consider the case of Terry Albury, the FBI Agent who shared a number of files on the FBI’s targeting of Muslims with The Intercept. As part of a plea agreement, the government charged Albury with two counts of 793e, one for a document about FBI informants that was ultimately published by The Intercept, and another (about an online terrorist recruiting platform) that Albury merely brought home. The government’s sentencing memo described the import of files he brought home but did not share with The Intercept this way:

The charged retention document relates to the online recruitment efforts of a terrorist organization. The defense asserts that Albury photographed materials “to the extent they impacted domestic counter-terrorism policy.” (Defense Pos. at 37). This, however, ignores the fact that he also took documents relating to global counterintelligence threats and force protection, as well as many documents that implicated particularly sensitive Foreign Intelligence Surveillance Act collection. The retention of these materials is particularly egregious because Albury’s pattern of behavior indicates that had the FBI not disrupted Albury and the threat he posed to our country’s safety and national security, his actions would have placed those materials in the public domain for consumption by anyone, foreign or domestic.

And in a declaration accompanying Albury’s sentencing, Bill Priestap raised the concern that by loading some of the files onto an Internet-accessible computer, Albury could have made them available to entities he had no intention of sharing them with.

The defendant had placed certain of these materials on a personal computing device that connects to the Internet, which creates additional concerns that the information has been or will be transmitted or acquired by individuals or groups not entitled to receive it.

This is the scenario that, one year earlier, was publicly offered as an explanation for the theft of the files behind The Shadow Brokers; someone brought sensitive files home and, without intending to, made them potentially available to foreign hackers or spies.

Albury was sentenced to four years in prison for bringing home 58 documents, of which 35 were classified Secret, and sending 25 documents, of which 16 were classified Secret, to the Intercept.

Then there’s the case of Daniel Hale, another Intercept source. Two years after the Shadow Brokers leaks (and five years after his leaks), he was charged with five counts of taking and sharing classified documents, including two counts of 793e tied to 11 documents he took and shared with the Intercept. Three of the documents published by The Intercept were classified Top Secret.

Hale pled guilty last year, just short of trial. As part of his sentencing process, the government argued that the baseline for his punishment should start from the punishments meted to those convicted solely of retaining National Defense Information. It tied Hale’s case to those of Martin and Pho explicitly.

Missing from Hale’s analysis are § 793 cases in which defendants received a Guidelines sentence for merely retaining national defense information. See, e.g., United States v. Ford, 288 F. App’x 54, 61 (4th Cir. 2008) (affirming 72-month sentence for retention of materials classified as Top Secret); United States v. Martin, 1:17-cr-69-RDB) (D. Md. 2019) (nine-year sentence for unlawful retention of Top Secret information); United States v. Pho, 1:17-cr-00631 (D. Md. 2018) (66-month sentence for unlawful retention of materials classified as Top Secret). See also United States v. Marshall, 3:17-cr-1 (S.D. TX 2018) (41-month sentence for unlawful retention of materials classified at the Secret level); United States v. Mehalba, 03-cr-10343-DPW (D. Ma. 2005) (20-month sentence in connection with plea for unlawful retention – not transmission – in violation of 793(e) and two counts of violating 18 U.S.C. 1001; court departed downward due to mental health of defendant).

Hale is more culpable than these defendants because he did not simply retain the classified documents, but he provided them to the Reporter knowing and intending that the documents would be published and made available to the world. The potential harm associated with Hale’s conduct is far more serious than mere retention, and therefore calls for a more significant sentence. [my emphasis]

Even in spite of a moving explanation for his actions, Hale was sentenced to 44 months in prison. Hale still has almost two years left on his sentence in Marion prison.

That focus on other retention cases from the Hale filing was among the most prominent national references to yet another case of someone prosecuted during the Trump Administration for taking classified files home from work, that of Weldon Marshall. Over the course of years of service in the Navy and then as a contractor in Afghanistan, Marshall shipped hard drives of classified materials home.

From the early 2000s, Marshall unlawfully retained classified items he obtained while serving in the U.S. Navy and while working for a military contractor. Marshall served in the U.S. Navy from approximately January 1999 to January 2004, during which time he had access to highly sensitive classified material, including documents describing U.S. nuclear command, control and communications. Those classified documents, including other highly sensitive documents classified at the Secret level, were downloaded onto a compact disc labeled “My Secret TACAMO Stuff.” He later unlawfully stored the compact disc in a house he owned in Liverpool, Texas. After he left the Navy, until his arrest in January 2017, Marshall worked for various companies that had contracts with the U.S. Department of Defense. While employed with these companies, Marshall provided information technology services on military bases in Afghanistan where he also had access to classified material. During his employment overseas, and particularly while he was located in Afghanistan, Marshall shipped hard drives to his Liverpool home. The hard drives contained documents and writings classified at the Secret level about flight and ground operations in Afghanistan. Marshall has held a Top Secret security clearance since approximately 2003 and a Secret security clearance since approximately 2002.

He appears to have been discovered when he took five Cisco switches home. After entering into a cooperation agreement and pleading guilty to one count of 793e, Marshall was (as noted above) sentenced to 41 months in prison. Marshall was released last year.

Outside DOJ, pundits have suggested that Trump’s actions are comparable to those of Sandy Berger, who like Trump stole files that belong to the National Archives and after some years pled guilty to a crime that Trump since made into a felony, or David Petraeus, who like Trump took home and stored highly classified materials in unsecured locations in his home. Such comparisons reflect the kind of elitist bias that fosters a system in which high profile people believe they are above the laws that get enforced for less powerful people.

But the cases I’ve laid out above — particularly the lesson Pho and Martin offer about how catastrophic it can be when someone brings classified files home and stores them insecurely, no matter their motives — are the background against which career espionage prosecutors at DOJ will be looking at Trump’s actions.

And while Trump allegedly brought home paper documents, rather than the digital files that Russian hackers could steal while sitting in Moscow, that doesn’t make his actions any less negligent. Since he was elected President, Mar-a-Lago became a ripe spying target, resulting in at least one prosecution. And two of the people he is most likely to have granted access to those files, John Solomon and Kash Patel, each pose known security concerns. Trump has done the analog equivalent of what Pho did: bring the crown jewels to a location already targeted by foreign intelligence services and store them in a way that can be easily back-doored. Like Pho, it doesn’t matter what Trump’s motivation for doing so was. Having done it, he made it ridiculously easy for malicious actors to simply come and take the files.

Under Attorneys General Jeff Sessions and Bill Barr, DOJ put renewed focus on prosecuting people who simply bring home large caches of sensitive documents. They did so in the wake of a costly lesson showing that the compromise of insecurely stored files can do as much damage as a high level recruited spy.

It’s a matter of equal justice that Trump be treated with the same gravity with which Martin and Pho and Albury and Hale and Marshall were treated under the Trump Administration, for doing precisely what Donald Trump is alleged to have done (albeit with far fewer and far less sensitive documents). But as the example of Shadow Brokers offers, it’s also a matter of urgent national security.

Share this entry

Obstruction: The Two-Receipt Search of the Former President’s Golf Resort

There are two separate receipts for the search of Mar-a-Lago signed, in the same minute, by Trump lawyer Christina Bobb.

There’s the one consisting of five boxes and a separate category, “Documents,” not associated with any boxes, signed by the Supervisory Special Agent. There are no classified documents described. I’ll refer to that as the SSA Receipt in this post.

Then there’s the one that consists of 27 items, mostly boxes, many with sub-items, which are often descriptions of the kinds of classified documents contained in the box or the leather case they were seized in. It was signed by a Special Agent. I’ll refer to that as the CLASS Receipt in this post.

Bobb signed them both at 6:19PM, so unless she’s a shitty lawyer, these receipts were presented to her together as one running receipt.

Whatever else the FBI is, their searches are methodical. They come in, secure the location, serially take pictures of the rooms being searched (so the criminal suspects don’t claim evidence was planted, as criminal suspects are wont to do), label the things to be searched, start sorting through items according to a search protocol to see if they’re covered by the warrant, then inventory the things being seized. In this case, there would have been another part of the process to make sure no attorney-client privileged materials were seized.

In the search of Trump’s house, at least 73 boxes appear to have been labeled (based on the highest box label number), but just 26 boxes were seized.

By all appearances, these two receipts stem from the same methodical search. For example, the documents listed as item 4 on SSA receipt are in the same overall inventory as everything else, but appear out of sequence. They likely bear some proximal relation to low-item numbers in the CLASS receipt — things like the Roger Stone clemency and the binders of photos. Perhaps they were all found in Trump’s office or residence. But they are on the SSA receipt.

The series of box labels crosses both receipts. For example, it appears that boxes A-14 and A-13, which appear in the SSA receipt, were labeled in close proximity and time as boxes A-12 and A-15, which are among the lowest numbered boxes on the CLASS receipt. But they got listed on the SSA receipt, where all boxes appear together as the final five items on the combined inventory, items 29 through 33.

I’d like to talk more about the search, but first let me spoil the punchline: One likely (though not the only) explanation for the two receipts has to do with the venue in which Trump’s suspected crimes were committed and therefore the ultimate destination of the seized materials, with the SSA receipt materials being sent to DC as evidence of 18 USC 1519 and the CLASS receipt materials being kept in Miami as evidence of multiple violations of the Espionage Act that occurred at Mar-a-Lago.

But let’s go back.

I believe this warrant is the totality of the search on Trump’s mansion. While File411 suspects there’s another warrant (or two), I don’t believe those authorize a search of Trump’s house, not least because Judicial Watch has only asked to unseal one, and Trump’s people will have told them what they wanted unsealed. Merrick Garland referred to unsealing the documents relating to Trump’s house, and I’d be surprised if he played word games to hide further search materials when Trump would literally have receipts to call out any such obfuscation. That doesn’t rule out that the other warrants identified by File411 were related searches, perhaps of locations where Trump’s stolen documents may have been moved, but I believe we’re looking at the totality of the physical search at Mar-a-Lago. Update, August 15: DOJ has now confirmed that this is an entirely separate ongoing investigation. Remember that lots of January 6 suspects live in Florida, so it could be something like that or an entirely different type of crime.

The warrant authorizes the FBI to search Trump’s office (the narcissist appears to have renamed it the 45 Office but it has been referred to as the bridal suite), all storage rooms (the one that Trump’s lawyers showed Jay Bratt when he visited in June is not identified by name), and anywhere else Trump or his staff might have stashed boxes or documents. We know from reports that that included Trump’s personal residence, but the FBI didn’t call it out by name. Curiously, the FBI made clear that when it said the search did not include spaces occupied by guests or other residents, they mean “currently,” as if there’s a room someone recently vacated that is of interest.

Attachment B, which describes the items to be searched for, is one of the things that may explain the two receipts. It starts by listing three crimes: 18 USC 793 (Gathering, transmitting or losing defense information, which is part of the Espionage Act), 18 USC 2071 (Concealment, removal, or mutilation [of official records] generally), and 18 USC 1519 (Destruction, alteration, or falsification of records in Federal investigations).

Despite the fact that every single leak to the press about the scope of the warrant claimed that two crimes were listed, “mishandling classified information” and the Presidential Records Act, those leaks were all false. The former was a transparent attempt to avoid saying the word “Espionage” and the latter is not listed on the warrant as a crime being investigated at all (though I would bet a great deal of money that it features prominently in the affidavit). 18 USC 2071, in this context, may serve as a proxy, criminalizing the removal of records covered by PRA. And one of the four bullets describing materials that can be seized, bullet c,  stems from PRA: “Any government and/or Presidential Record created between January 20, 2017, and January 20, 2021.” Because it would cover items implicated in the two other crimes, National Defense Information and evidence from Federal investigations, that bullet point serves as a larger umbrella in this search. If Trump tries to claim he declassified the items seized in the Espionage Act investigation, for example, the government will be able to say they still seized them lawfully given that bullet point and the inclusion of 18 USC 2071, because to still be at Mar-a-Lago at this point, they would have had to have been removed improperly from government control.

There are two bullet points scoping out materials relating to the Espionage count. Bullet point b authorizes the seizure of information about the storage of NDI or classified information.

Information, including communications in any form, regarding the retrieval, storage, or transmission of national defense information or classified material.

If Trump or his flunkies are charged under the Espionage Act, DOJ will have to rebut the claims being floated by Kash Patel and John Solomon that Trump declassified this material. One way to do that is to show that Trump or his lawyers instructed staffers to treat certain materials as if it was classified. If, for example, Trump put up post-it notes on his storage room saying “Danger: Sekrits. Keep Out,” it would prove that he was telling others to treat the documents with care. I’m only partly joking. We know there were efforts to prevent uncleared staffers from looking at classified information. Obtaining written proof of such instructions is one of the ways DOJ would prove that Trump did know this stuff remained classified. Even if those efforts were only enforced by his lawyers — the same lawyers who failed to turn over these materials in response to subpoena — it will be powerful evidence that those documents were being treated as if they remained classified.

The other bullet point authorizing evidence covered by the Espionage Act reminds me of Borges’s writings on classification.

Any physical documents with classification markings, along with any containers/boxes (including any other contents) in which such documents are located, as well as any other containers/boxes that are collectively stored or found together with the aforementioned documents and containers/boxes.

Effectively, this allows the FBI to seize documents with classification markings and then work out from there, seizing the box containing the document marked as classified, as well as the contents of the closet that a box containing a classified document was in. It’s fairly easy to understand why the FBI wrote it this way (and it may be tailored to overcome the justifications Trump made over the course of 18 months to try to retain certain materials). The President looks at — and in many cases, generates — a whole slew of things that are considered highly classified, but in a form that wouldn’t have classification marks on it, especially if he never shared it with a staffer. If Trump took notes with his Sharpie on a cocktail napkin during a phone call directly with Mohammed bin Salman, for example, it would not include classification marks, but it might be highly classified. So this bullet point allows FBI to seize stuff being treated the same way as documents that do have formal classification markings, which government classification experts can then apply the appropriate classification to.

How this might have worked in practice appears on the CLASS receipt. The second-most interesting item on the list (after the Roger Stone clemency that seems to have some tie to the French President) is the leather box in which the only documents inventoried as TS/SCI were stored.

Not all of these documents are TS/SCI; the inventory even notes that some are just classified. But given the way the warrant is written, the FBI was permitted to seize the entire box, which appears to contain Donald’s precious treasures, even if some of the documents in there are not labeled as classified. It may be that witnesses told the FBI of the existence of this box so the FBI knew to look for it. By seizing the entire box, the FBI would get things that might be even more sensitive than the TS/SCI stuff, but that don’t bear markings, like that hypothetical cocktail napkin with notes of Trump’s secret calls with MbS.

The thing is, these categories overlap. There may have led to some triage onsite about how to classify seized documents. I suggested that item 4 — documents — may have been stored with items 1 through 7 in Trump’s office or residence. If so, they could have been seized by proximal location. But they’re inventoried on the other receipt for some reason, potentially even taken out of a box or that leather case and seized separately as individual documents.

Similarly, boxes A-13 and A-14 were likely stored in close proximity to box A-15, which includes at least some Secret Documents, and box A-16, which includes at least some Top Secret Documents. So they could have been seized under the logic of proximity. But like item 4, they’re on a different receipt.

Which brings me to the final bullet describing the scope of the search (and back to my working hypothesis for the two different receipts, that the SSA receipt covers evidence of obstructive acts committed in DC). It authorizes the seizure of evidence of the destruction of records.

Any evidence of the knowing alteration, destruction, or concealment of any government and/or Presidential Records, or of any documents with classification markings.

This language comes right out of the obstruction statute, though leaves out the reference to “investigation[s] or proper administration:”

Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both.

This part of the warrant, not the reference to the Espionage Act, was the biggest secret of the week. I was not surprised that anonymous sources from the Trump camp soft-pedaled the word “Espionage.” It’s why I was pushing for pressure on Trump to release the warrant. It’s what I believed Trump most wanted to hide.

But remarkably, Trump’s leakers were hiding this part of the warrant even more aggressively. In the entire week of post-search coverage, there was never a hint that obstruction was on the warrant, too. The “Expert Explainers” gaming out what crimes might be on the warrant completely missed obstruction. I did too.

We shouldn’t have. The coverage of the Archives’ referral of Trump to DOJ described his destruction of evidence even more prominently than it did his theft of classified documents.

The National Archives and Records Administration has asked the Justice Department to examine Donald Trump’s handling of White House records, sparking discussions among federal law enforcement officials about whether they should investigate the former president for a possible crime, according to two people familiar with the matter.

The referral from the National Archives came amid recent revelations that officials recovered 15 boxes of materials from the former president’s Mar-a-Lago residence in Florida that were not handed back in to the government as they should have been, and that Trump had turned over other White House records that had been torn up. Archives officials suspected Trump had possibly violated laws concerning the handling of government documents — including those that might be considered classified — and reached out to the Justice Department, the people familiar with the matter said.

[snip]

Trump’s years-long defiance of the Presidential Records Act, which requires the preservation of memos, letters, notes, emails, faxes and other written communications related to a president’s official duties, has long raised concerns among historians and legal observers. His penchant for ripping up official documents was first reported by Politico in 2018, but it has drawn new scrutiny in recent weeks because of a House select committee’s investigation of the Jan. 6, 2021, attack on the U.S. Capitol.

The Washington Post reported late last month that some of the White House records the National Archives turned over to the committee appeared to have been torn apart and then taped back together. The Post later found — and the Archives confirmed — that officials had recovered 15 boxes of presidential records from Mar-a-Lago.

As described, by the time of its criminal referral, the Archives had already found that documents that were responsive to the January 6 Committee’s investigation (and so, derivatively, DOJ’s investigation of Trump personally) had been “altered, destroyed, or mutilated.” DOJ would have started this investigation knowing that Trump had attempted to destroy evidence implicating him in January 6 (though we actually have evidence of him attempting to destroy or alter evidence pertinent to other criminal investigations, too).

By description, when Trump tried to destroy evidence, he did so immediately, in the heat of the moment, in the White House. For that reason, and because the known federal investigations — his attempted coup on January 6, but also his ties to Russia, his coercion of Ukraine, even his inauguration graft — were all predicated in DC, the investigation into Trump’s obstruction of those investigations would be in DC too. That’s why I hypothesize that FBI may have inventoried everything and then, when compiling a final inventory to share with Trump, they distinguished between the suspected crimes that would have been committed in Florida, by storing classified information improperly and refusing to return it to the Federal government, and the suspected crimes that would have been committed in DC when — on January 20 or before, including between January 6 and January 20 — Trump ripped up, flushed, burned, or tried to eat incriminating evidence.

Unless Trump were to waive venue (which he would never do), any prosecution of Trump under the Espionage Act would happen in SDFL, because that’s where he illegally retained classified information after the government asked him to give it back. But any prosecution of Trump for obstruction would happen where the investigations he obstructed were and where he ripped up evidence, in DC.

Item 4, documents, might just be documents that bore visible signs of destruction that had some identifiable tie to January 6 or some other known investigation. They could even be classified! The obstruction bullet point includes classified documents! But they would have been seized, first and foremost, because they were evidence that Trump was trying to impede an investigation or some other government function by destroying evidence.

That has one more big implication, which may be why Trump’s team tried so hard to hide that FBI was looking for evidence of obstruction. There were also leaks (including leaks from the government side) that nothing on this search warrant pertains to January 6. Technically that’s true. Obstruction of the vote certification and conspiracy to defraud the government, the most obvious crimes covering Trump’s conduct leading up to and on January 6, aren’t on the warrant. But as that coverage of the original referral we all forgot to read makes clear, January 6 is at least one of the investigations that Trump is being investigated for obstructing. If the evidence of obstruction is being boxed up and sent back to DC where such an investigation would be predicated, then the evidence would thereby become available to investigators, both for evidence of Trump’s obstruction of an investigation, but also for evidence of Trump’s conduct as well.

Oh. And if Trump were found to have obstructed an investigation into conspiracy by destroying evidence, it might extend the statute of limitations on that conspiracy.

I wrote a long thread yesterday about how Trump epically fucked up by giving DOJ grave reasons to come search his home. DOJ would never have searched Mar-a-Lago for materials Trump withheld in violation of the PRA. They probably would never have searched MAL for evidence he withheld regarding January 6. But Trump kept refusing to turn over classified information DOJ knew he had, some of it reportedly incredibly sensitive. Trump dared Merrick Garland to come get those classified documents. And in so doing, Donald J. Trump gave the FBI urgent reason to come into his home to seize — along with at least 11 boxes containing classified documents — the evidence about January 6 and other investigations that is so sensitive Trump tried to destroy it before refusing to turn it over to the Archives.

Share this entry

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

On June 22, Kash Patel announced that he had just been made a representative for Trump at the National Archives. (h/t to Suburban Gal for these links)

I can tell you now that I am now officially a representative for Donald Trump at the National Archives. And I’m going to march down there — I’ve never told anyone this, because it just happened, and I’m going to identify every single document that they blocked from being declassified at the National Archives.

The next day, Kash described that that letter, making him Trump’s representative to the Archives, “just came in, literally before I came on the show” the day before.

[Update, August 15] Trump had informed the Archives three days earlier, on June 19, that Kash and Solomon would be added to his list of representatives.

As it happens, June 22 is also the same day that the FBI sent a subpoena to Mar-a-Lago for surveillance footage.

On June 22, the Trump Organization, the name for Mr. Trump’s family business, received a subpoena for surveillance footage from cameras at Mar-a-Lago. That footage was turned over, according to an official.

According to a John Solomon column that was actually the first to report details of this purported cooperation in June, the subpoena specifically asked for surveillance videos covering the room where Trump had stashed his stolen documents.

Around the same time, the Trump Organization, which owns Mar-a-Lago, received a request for surveillance video footage covering the locker and volunteered the footage to federal authorities, sources disclosed.

On June 24, two days after DOJ sent a subpoena for the surveillance footage, Betsy Woodruff Swan reported that it wasn’t just Kash who had been given privileged access to Trump’s Archives. Solomon had also been made Trump’s representative at the Archives.

That seeming coincidence — that the FBI formally asked for surveillance videos showing who had accessed Trump’s stash of stolen records on the same day that Kash and Solomon were officially added to the list of those who represented Trump’s interests with the Archives — may raise the stakes of Trump’s legal exposure significantly.

That’s because if Trump deliberately allowed people not permitted access to classified documents or his negligence allowed people to remove such documents, it would trigger other parts of the Espionage Act than the one that prohibits someone from stealing classified documents and refusing to give them back (and all are covered by the warrant).

(d)Whoever, lawfully having possession of, access to, control over, or being entrusted with any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, instrument, appliance, or note relating to the national defense, or information relating to the national defense which information the possessor has reason to believe could be used to the injury of the United States or to the advantage of any foreign nation, willfully communicates, delivers, transmits or causes to be communicated, delivered, or transmitted or attempts to communicate, deliver, transmit or cause to be communicated, delivered or transmitted the same to any person not entitled to receive it, or willfully retains the same and fails to deliver it on demand to the officer or employee of the United States entitled to receive it; or

[snip]

(f)Whoever, being entrusted with or having lawful possession or control of any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, instrument, appliance, note, or information, relating to the national defense, (1) through gross negligence permits the same to be removed from its proper place of custody or delivered to anyone in violation of his trust, or to be lost, stolen, abstracted, or destroyed, or (2) having knowledge that the same has been illegally removed from its proper place of custody or delivered to anyone in violation of its trust, or lost, or stolen, abstracted, or destroyed, and fails to make prompt report of such loss, theft, abstraction, or destruction to his superior officer—
Shall be fined under this title or imprisoned not more than ten years, or both.

Neither of these men would have been authorized to access classified documents, if they did, after January 20, 2021.

Solomon, of course, has come under scrutiny for his role as a mouthpiece for Russian-backed attacks on Joe Biden. While DOJ was not known to have obtained a warrant on him by April 2021, much could have happened after that.

Kash Patel did have the top levels of clearance until Trump left office. But at least by April 2021, Kash was reported to be under investigation for leaking classified information.

Patel repeatedly pressed intelligence agencies to release secrets that, in his view, showed that the president was being persecuted unfairly by critics. Ironically, he is now facing Justice Department investigation for possible improper disclosure of classified information, according to two knowledgeable sources who requested anonymity because of the sensitivity of the probe. The sources said the investigation resulted from a complaint made this year by an intelligence agency, but wouldn’t provide additional details.

Once that investigation was predicated, Kash would have been stripped of clearance, if he hadn’t already been.

Which means both the men that Trump picked to dig through his documents would pose grave security concerns.

And Kash, at least, is the single witness claiming — belatedly, starting in May — that Trump declassified this information. Before much of this became public, Kash claimed Trump had declassified it all, but just not marked it as declassified.

“Trump declassified whole sets of materials in anticipation of leaving government that he thought the American public should have the right to read themselves,” Patel told Breitbart News in a phone interview.

“The White House counsel failed to generate the paperwork to change the classification markings, but that doesn’t mean the information wasn’t declassified,” Patel said. “I was there with President Trump when he said ‘We are declassifying this information.’”

“This story is just another disinformation campaign designed to break the public trust in a president that lived on transparency. It’s yet another way to attack Trump and say he took classified information when he did not,” he added.

At the point he made those claims, in May, Kash demonstrated extensive familiarity with the content of that first batch of stolen classified documents that had been stashed at Mar-a-Lago for a year.

Patel did not want to get into what the specific documents were, predicting claims from the left that he was disclosing “classified” material, but said, “It’s information that Trump felt spoke to matters regarding everything from Russiagate to the Ukraine impeachment fiasco to major national security matters of great public importance — anything the president felt the American people had a right to know is in there and more.”

If Kash knows that first-hand — if Kash knows that because Trump let him wade through Top Secret documents he was no longer cleared to access — then Trump may have additional criminal liability.

Update: After a week of bullshit excuses, Trump — via John Solomon — is now offering a new bullshit excuse: That Trump had a standing order that everything he back to the residence in the White House was declassified. The claim is mostly interesting because Solomon — who wasn’t even at the White House! — is feeding it up.

Update: Added link to June 19 request.

Share this entry

A Different DOJ Search of Note: Joshua Schulte

Josh Schulte should have grown concerned when David Denton — one of the two AUSAs in charge of his prosecution — didn’t show up to a status conference on July 26.

THE COURT: All right. Good afternoon, everyone. Mr. Lockard, will Mr. Denton be joining us?

MR. LOCKARD: He will not be joining us today.

For that matter, he should have sussed something was up a month earlier, during trial, when Denton objected to Schulte’s bid to introduce a script he wrote as evidence at his trial because of ongoing and escalating security concerns.

[Y]our Honor, we have accepted a continuing expansion of the defendant’s use of a laptop that was originally provided for the purpose of reviewing discovery, but to us, this is really a bridge too far in terms of security concerns, particularly in light of the issues uncovered during the last issue with his laptop and the concerns that the MDC has raised to us about tampering with the law library computer. We have not taken any action in response to that, because we’re in the middle of trial and we’re loath to do things that would disrupt the trial at this point.

As I laid out, among the security concerns Denton was worried about was that, just weeks before trial when Schulte claimed that his laptop was broken, IT staff at the US Attorney’s Office discovered that Schulte had been tampering with the BIOS on his laptop, seemingly in an attempt to bypass WiFi restrictions.

First, with respect to the defendant’s discovery laptop, which he reported to be inoperable as of June 1, 2022 (D.E. 838), the laptop was operational and returned to Mr. Schulte by the end of the day on June 3, 2022. Mr. Schulte brought the laptop to the courthouse on the morning of June 3 and it was provided to the U.S. Attorney’s Office information technology staff in the early afternoon. It appears that the laptop’s charger was not working and, after being charged with one of the Office’s power cords, the laptop could be turned on and booted. IT staff discovered, however, that the user login for the laptop BIOS1 had been changed. IT staff was able to log in to the laptop using an administrator BIOS account and a Windows login password provided by the defendant. IT staff also discovery an encrypted 15-gigabyte partition on the defendant’s hard drive. The laptop was returned to Mr. Schulte, who confirmed that he was able to log in to the laptop and access his files, along with a replacement power cord. Mr. Schulte was admonished about electronic security requirements, that he is not permitted to enable or use any wireless capabilities on the laptop, and that attempting to do so may result in the laptop being confiscated and other consequences. Mr. Schulte returned to the MDC with the laptop.

1 The BIOS is firmware used to provide runtime services for operating systems and programs and to perform hardware initialization during the booting process. The BIOS settings can determine, for example, whether external ports and wireless capabilities are enabled or disabled.

So DOJ revealed evidence that Schulte was attempting to hack his discovery laptop before trial, Denton implied DOJ was waiting until after trial to do anything about it, and Denton was too busy to show up at the status hearing on July 26.

He appears to have been busy getting a search warrant for the laptop. The government served Schulte with the warrant and seized the offending laptop two days later, on July 28. After Schulte attorney Sabrina Shroff complained, the government explained that since they had not yet charged Schulte in conjunction with the new warrant, they didn’t have to provide their affidavit.

[T]he Government’s investigation of the defendant’s conduct that gave rise to the search warrant is ongoing, no charges related to his use of the laptop have been filed, and the scope and precise nature of the conduct that the Government is investigating are not known either to the public or to the defendant.

If that investigation results in the use of information obtained pursuant to the search warrant, the Government will comply with its discovery obligations promptly.

They did, however, object to getting Schulte a new laptop.

The defendant has seven weeks to draft and file his pro se motions pursuant to Federal Rules of Criminal Procedure 29 and 33, and can do so using the normal resources available to pro se inmates at the Metropolitan Detention Center. The defendant “has the right to legal help through appointed counsel, and when he declines that help, other alternative rights, like access to a [personal laptop], do not spring up.” United States v. Byrd, 208 F.3d 592, 593 (7th Cir. 2000). Particularly in view of the Magistrate Judge’s determination that there is probable cause to believe that the defendant’s previous laptop contains evidence of additional crimes, there is no reason that the defendant should be afforded special access to a new laptop simply because the Court has permitted him to proceed partially pro se for certain matters going forward.

Shroff’s reply, in addition to making a legitimate case that Schulte should be able to get a laptop to finish his Rule 29 and 33 motions, provided more detail of what she knows about the warrant. This is not about espionage. She mentions only additional counts of contempt and possessing contraband, the same charges investigated in 2018 when Schulte’s phone was found (though those crimes seem inconsistent with the security concerns — hacking — described leading up to the trial).

The search warrant itself notes that the government is not alleging it has probable cause for any acts of espionage.

[snip]

Notably, while the government’s letter states the factors which may permit an affidavit to be withheld – e.g., to preserve confidential sources or protect witnesses – the government never explains how those factors possibly could apply here, where someone already incarcerated is accused of violations of Title 18, United States Code, Sections 401(3) (contempt of court) and 1791(a) (possessing contraband in a correctional facility). There are no confidential sources or witness at risk – and production of the affidavit in support of the search warrants implicates none of the articulated concerns.

But that’s not right. It can’t be right. If Schulte got contraband, it means someone — his legal team, his family, or the guards — shared it with him. He has a history of getting the latter two involved in ferrying information or goods improperly. I’m mindful, too, of Schulte’s curious replication of a WikiLeaks-seeded propaganda campaign about Mike Pompeo, even in spite of being on SAMs.

After suggesting there couldn’t be witnesses in a situation where there’d have to be witnesses, Shroff turns the government’s efforts to avoid disrupting Schulte’s trial on its head, claiming it is proof that waiting until after the trial is punitive.

The timing of the search warrant sought by the government as it relates to its stance on a replacement laptop is perhaps informative. Right before start of trial, a guard at the MDC dropped Mr. Schulte’s laptop. See ECF Docket Entry No. 838. In an effort to “fix” the laptop, Mr. Schulte provided it to the government – for that limited purpose. The government then returned the laptop saying it was working but asked Mr. Schulte about the organization of the laptop and then asked the court to admonish Mr. Schulte for manner in which he was maintaining it. The government did nothing more. It did not ask the Court for a search warrant or to curtail Mr. Schulte’s access to the laptop. The government allowed Mr. Schulte to keep his laptop – all through the trial – and only now seeks its seizure. The timing appears punitive and not keyed to any potential harm to a third party.

Ultimately, Judge Jesse Furman declined to intervene, in part because the warrant was obtained in EDNY, not SDNY.

Share this entry

Brandon Straka’s Cell

I first published this post on the revelations about Brandon Straka’s misdemeanor plea on August 5 at 2:10PM ET.

I posted it about 29 hours after Judge Dabney Friedrich ordered the Probation Office to provide a report by September 30 about Straka’s compliance with probation; during a status hearing a day earlier, Friedrich admonished Straka about saying things publicly that conflicted with what he had said to the FBI in interviews and said to her at his plea colloquy.

I posted it about 28 hours after FBI Director Christopher Wray responded to one of the only questions raised in an SJC oversight hearing about January 6 that, “And then, of course, I have to be a little bit careful about what I say here but we are continuing to develop some of the more complicated parts of the investigation in terms of conspiracy charges and that sort of thing.”

I posted it minutes before a CPAC panel (sponsored, in part, by a Viktor Orbán-tied NGO) featuring Andy Biggs, Straka, and Kash Patel warning that  “Soros prosecutors” were instituting a “Democrat Gulag.”

Straka spent most of the rest of that day, Friday — the day after the judge overseeing his probation ordered more scrutiny into the sincerity of claims he made under oath and to the FBI — in a cage, performing the role of a jailed January 6 defendant counting the days until his release, crying.

Some spectators wept. Some threw money into the cage. Others came up close to mutter words of comfort and support to the emotionally distraught man inside, who was alternating sitting on a bare cot with his head in his hands, and writing sad slogans on a blackboard like “Where is Everyone?” Among those in the audience was Zuny Duarte, mother of Enrique Tarrio, the jailed ex-chairman of the Proud Boys facing seditious conspiracy charges for his role in the Capitol. One man, wearing a T-shirt saying “Correctional Officers for Trump 2020” pointed at his chest, making sure the “jailed” activist saw, and said “”I know how it works, man.”

During Thursday’s performance in the J6 cage, the man in the prison had been an actor. But on Friday, the man was none other than Brandon Straka, a self-proclaimed former liberal who founded #WalkAway, a social media campaign encouraging Democrats to ditch their party for the GOP. Straka was a vocal Stop the Steal proponent and activist, and landed in hot water with the feds when he filmed himself from the steps of the Capitol building on Jan. 6.

All of which makes me really glad that, in that post, I reiterated all the concerns I’ve raised in the past about Straka’s treatment, including that the deal given to Straka would backfire.

Plus, it’s not entirely clear whether such pleas will backfire down the road, given that prosecutors have little ongoing means to ensure cooperation, as they would with felony cooperators hoping to benefit from 5K letters supporting leniency at sentencing.

[snip]

At the time, it looked like a shitty deal by the government, and multiple researchers I know grumbled that the government simply didn’t know what a central role Straka had when they interviewed him just weeks after the riot.

Even in December, there was good reason to question whether DOJ had made a decent deal when it traded information about Stop the Steal organizers in exchange for a misdemeanor plea, rather than building their case, including Straka in a conspiracy to obstruct the vote certification, and then flipping him.

Now, with Straka openly mocking the entire DOJ investigation, there should be real questions at DOJ whether Straka is replaying the Mike Flynn or Jerome Corsi play, reneging on purported cooperation to sabotage the investigation into Trump and his associates.

As a reminder, in Corsi’s case, in an initial interview with Mueller’s prosecutors, they caught him making claims that conflicted with communications records DOJ already obtained. Then, they got him to admit to a grand jury that Stone had asked him to establish a cover story for his “Podesta time in a barrel” tweet in real time, just days after Stone tweeted it. But then — at a time when, Corsi claimed, he was in communication with Trump’s attorney Jay Sekulow, Corsi went on his podcast and amid a dramatic meltdown not dissimilar from the drama we’ve seen from Straka, revealed that prosecutors were trying to force him into a cooperation plea deal with the government. After that point, his interviews with Mueller were a conflicting mishmash that, whatever else they were, made his prior testimony largely useless in any prosecution. It’s likely that an investigation against him was among those referred by Mueller. But he’s also such a batshit crazy person, it’d be hard to hold him accountable for deliberately blowing up interviews with the government.

In Mike Flynn’s case, his competent Covington lawyers negotiated a ridiculously lenient plea deal (in my opinion, one of Mueller’s three greatest mistakes), one that would have gotten the retired General no jail time. During the period he was supposed to be cooperating, he remained in touch with SJC staffer Barbara Ledeen and her husband Michael and Nunes aide Derek Harvey, all of whom kept him apprised of Sara Carter-backed propaganda efforts and Republican Congressional efforts to discredit the investigation. In 2018, Flynn even sent Matt Gaetz a text pushing for more pressure on Mueller. Then, once Bill Barr was confirmed, Flynn fired his competent lawyers and replaced them with Sidney Powell, who with Barr’s collusion, invented a slew of reasons that undermined the investigation against Flynn (in the process, protecting Trump from any Flynn-related obstruction charges). The outcome for Flynn was probably worse. But in the process, Flynn convinced a lot of people who only too late came to understand that both he and Sidney Powell are completely unhinged when they claim that the investigation against him was not a sweetheart deal, but instead a gross abuse of prosecutorial authority.

In both cases, Trump associates or movement operatives identified a cooperating witness and instead turned them into a chaos agent undermining an ongoing investigation. Here, Straka is appearing on a panel with suspected participants in the coup attempt, Andy Biggs and Kash Patel, and cozying up with someone who called for “Marshall Law,” all at a time when DOJ seems to be working on charges arising out of his so-called cooperation.

Given Straka’s recent trajectory, two details of his case from after the time his limited cooperation was made public are noteworthy. First, while Stuart Dornan, a former FBI Agent located (like Straka) in Nebraska remains on Straka’s team, in January, Straka added Bilal Essayli to his legal team, who appears to have taken the lead since, with it striking a far more confrontational tone.

Additionally, Straka’s team specifically — and successfully — objected to the Probation Office’s recommendation that Straka’s social media be monitored.

Brandon also objects to the recommendation by the Probation Officer that he be subjected to a discretionary condition of Probation that monitors his electronic communications service accounts, including email accounts, social media accounts, and cloud storage accounts. Brandon also objects to his financial activity being monitored by the Probation Office. These discretionary conditions of Probation are not sufficiently relevant to the offense committed. In United States v. Taylor, 796 F.3d 788 (7th Cir. 2015), the Seventh Circuit reversed a restriction on the defendant’s computer ownership and internet access in a bank larceny case, stating that the restriction was not reasonably related to his prior conviction for incest. In Brandon’s case, emailing, using social media, and using cloud storage has nothing to do with his offense.

Thus, while Dabney Friedrich ordered the Probation Office to conduct a review of what Straka has been up to while he has been engaging in deceitful performance art attacking the case, when she sentenced Straka, she specifically declined to include review of Straka’s social media. Straka has spent the last six months making a mockery of what he said to Friedrich back in January, most often on social media.

Mike Flynn, especially, has become a movement hero for tanking his own case to create havoc for any case against Trump. And Straka seems intent on pursuing just that kind of notoriety.

And it’s not clear what tools DOJ has retained to prevent that from happening.

Share this entry

The Evidentiary Hole in the Middle of Ari Melber’s “Not anything but evidence”

Fresh off giving Andrew Weissmann a platform to complain that DOJ’s multi-spoked investigation into January 6 should be multi-spoked, fresh off giving Adam Schiff an opportunity to make the (still-uncorrected) false claim that Congress never gets ahead of DOJ on parts of investigations they’re conducting in parallel, Ari Melber rolled out a schema (one, two) about his understanding of Trump’s corrupt acts that others have found really helpful.

It came with a nifty, mostly-accurate graphic that shows how multiple attempts to stay in power worked in parallel.

That graphic is helpful for those trying to keep track of all the efforts Trump pursued.

But Ari’s “special report,” which he claims is “built on evidence, not anything but evidence,” is most useful for demonstrating the evidentiary hole in the middle of his understanding of events leading up to January 6. And not just his understanding: also my own, and (at least based off their hearings) even the January 6 Committee’s. Neither Ari, the Committee, nor I, nor anyone I know to be investigating — save possibly DOJ and one or two really well sourced journalists — knows for certain what happened between the end of the December 18, 2020 meeting where Sidney Powell pitched Trump on a plan to seize voting machines and Trump’s December 19 tweet that led Stop the Steal plotters to start taking steps that led to a violent attack on the Capitol.

Before I lay out how well Ari illustrates that evidentiary hole, there are multiple things that Ari gets wrong (I’ve put my transcription of the most important parts of his presentation below). Most have to do with Ari’s apparent misunderstanding of how the blue collar violent attack on the Capitol related to the white collar parts of the coup attempt he has familiarity with.

For example, he claims, without evidence, that Rudy Giuliani, Mark Meadows, and John Eastman wanted pardons, “totally separate from the January 6 violence.” But according to Cassidy Hutchinson, both Rudy and Meadows knew by January 2 that Trump planned to go to the Capitol and it might get “real, real bad.”

CASSIDY HUTCHINSON: As Mr. Giuliani and I were walking to his vehicles that evening, he looked at me and said something to the effect of, Cass, are you excited for the 6th? It’s going to be a great day. I remember looking at him saying, Rudy, could you explain what’s happening on the 6th? He had responded something to the effect of, we’re going to the Capitol.

It’s going to be great. The President’s going to be there. He’s going to look powerful. He’s — he’s going to be with the members. He’s going to be with the Senators. Talk to the chief about it, talk to the chief about it. He knows about it.

LIZ CHENEY: And did you go back then up to the West Wing and tell Mr. Meadows about your conversation with Mr. Giuliani?

CASSIDY HUTCHINSON: I did. After Mr. Giuliani had left the campus that evening, I went back up to our office and I found Mr. Meadows in his office on the couch. He was scrolling through his phone. I remember leaning against the doorway and saying, I just had an interesting conversation with Rudy, Mark. It sounds like we’re going to go to the Capitol.

He didn’t look up from his phone and said something to the effect of, there’s a lot going on, Cass, but I don’t know. Things might get real, real bad on January 6th.

Hutchinson also tied White House awareness of the militias now charged with seditious conspiracy with Rudy’s presence.

CASSIDY HUTCHINSON: I recall hearing the word Oath Keeper and hearing the word Proud Boys closer to the planning of the January 6th rally when Mr. Giuliani would be around.

As for Eastman, Mike Pence’s Counsel, Greg Jacob, accused Eastman in real time, as his family was worried whether Jacob would get out alive, of causing the “siege” on the Capitol by “whipping large numbers of people into a frenzy over something with no chance of ever attaining legal force through actual process of law.”

[T]hanks to your bullshit, we are now under siege.

[snip]

[I]t was gravely, gravely irresponsible of you to entice the President of with an academic theory that had no legal viability, and that you well know we would lose before any judge who heard and decided the case. And if the courts declined to hear it, I suppose it could only be decided in the streets. The knowing amplification of that theory through numerous surrogates, whipping large numbers of people into a frenzy over something with no chance of ever attaining legal force through actual process of law, has led us to where we are.

Judge David Carter’s opinion finding it likely Eastman and Trump conspired to obstruct the vote count included Trump’s effort to send the mob, which we now know he knew to be armed, to the Capitol.

President Trump ended his speech by galvanizing the crowd to join him in enacting the plan: “[L]et’s walk down Pennsylvania Avenue” to give Vice President Pence and Congress “the kind of pride and boldness that they need to take back our country.”218

So all of these three men, per key witnesses and one judge, have legal exposure that is directly tied to the violence at the Capitol. Maybe they only wanted pardons for their white collar crimes, but — according to the evidence — all are implicated in the blue collar crimes.

Ari also treats the consideration of a plan to have DOD seize the voting machines as “the military plot,” one that ended on December 18. There are two problems with this. First, Ari ignores that this plan was revised to put DHS in charge of seizing the machines, which is how the plan resurfaced on December 31, when Trump serially tried to get DOJ and DHS to seize the machines.

ADAM KINZINGER: Mr. Rosen, the President asked you to seize voting machines from state governments. What was your response to that request?

JEFFREY A. ROSEN: That we had — we had seen nothing improper with regard to the voting machines. And I told him that the — the real experts that had been at DHS and they had briefed us, that they had looked at it and that there was nothing wrong with the — the voting machines. And so that was not something that was appropriate to do.

ADAM KINZINGER: There would be no factual basis to seize machines. Mr. Donoghue —

JEFFREY A. ROSEN: — I — I don’t think there was legal authority either.

ADAM KINZINGER: Yeah. Mr. Donohue can you explain what the President did after he was told that the Justice Department would not seize voting machines?

RICHARD DONOGHUE: The President was very agitated by the Acting Attorney General’s response. And to the extent that machines and — and the technology was being discussed, the Acting Attorney General said that the DHS, Department of Homeland Security, has expertise in machines and certifying them and making sure that the states are operating them properly.

And since DHS had been mentioned, the President yelled out to his Secretary get Ken Cuccinelli on the phone. And she did in very short order. Mr. Cuccinelli was on the phone. He was the number two at DHS at the time. It was on the speakerphone, and the President essentially said, Ken, I’m sitting here with the Acting Attorney General.

He just told me it’s your job to seize machines and you’re not doing your job. And Mr. Cuccinelli responded.

More importantly, Ari ignores that both militias charged with sedition and a goodly number of other armed rioters believed that larger scale violence would break out (possibly via clashes with counter-protestors, possibly in response to the GOP attempt to steal votes at the Capitol) on January 6, which would create the excuse for Trump to invoke the Insurrection Act to accord legal authority to the mob to act on his behalf. That will literally be Stewart Rhodes’ defense against a sedition charge, that he expected his attack on the US to come with Trump’s legal sanction.

And the plan may have gone further than that. To the extent that Trump asked the National Guard to be prepared for January 6, it was to protect his supporters, not to protect the Capitol.

Mr. Meadows sent an email to an individual about the events on January 6 and said that the National Guard would be present to ‘‘protect pro Trump people’’ and that many more would be available on standby.

When reports that the Guard would deploy first started to come out on January 6, Proud Boy Charles Donohoe [now a cooperating witness] reacted with surprise that the Guard would attack, rather than protect, Trump supporters.

That is, the actual plans for a military coup, rather than a Sidney Powell plan that Trump rejected then revisited, envisioned having armed Trump supporters and the National Guard holding the Capitol together. It was a plan that multiple militia members — most notably Rhodes, which forms a key part of the sedition evidence against him — but even joined by some members of Congress continued to pursue after January 6. There was a military plot that was far worse than the one that Ari labels as “that very bad red illegal plan,” but to understand it, you need to understand what happened at the Capitol, and what plans continued for weeks — still continue!! — after, per Ari, the violence “ended within one day.”

On top of a lack of understanding of what actually happened at the Capitol, Ari’s scheme includes conflicting claims. Ari claims that after Trump chose not to pursue Sidney Powell’s plan on December 18, he turned to “muscle.” “So that’s when I bring muscle to January 6.” His nifty graphic shows the plans to “sabotage Jan. 6” (adopting an utterly bizarre word, “sabotage,” which whitewashes both the violence planned and the legal crime, obstruction, committed) started right then, on December 19. But then, after claiming that Trump turned to “muscle” starting on December 19, Ari suggests that Trump’s only agency in the violence that ensued was the speech he gave on January 6. “The law makes it hard to pin an insurrection on one speech.”

In his presentation, at least, Ari ignores that “muscle” had been a part of the plan from the start, with operatives forming mobs at counting locations in the swing states that in turn created the cover for the fake electors plot and elicited threats against election officials, and it continued through to January 6 and beyond.

This may stem from an unfortunate unevenness on the part of the January 6 Committee.

The seventh hearing — the one purportedly focused on the rioters — depicted the actions of Ali Alexander and Alex Jones as an organic response to Trump’s December 19 tweet.

Donald Trump issued a tweet that would galvanize his followers, unleash a political firestorm, and change the course of our history as a country. Trump’s purpose was to mobilize a crowd. And how do you mobilize a crowd in 2020? With millions of followers on Twitter, President Trump knew exactly how to do it. At 1:42 AM on December 19, 2020, shortly after the last participants left the unhinged meeting, Trump sent out the tweet with his explosive invitation.

Trump repeated his big lie and claimed it was “statistically impossible to have lost the 2020 election” before calling for a big protest in DC on January 6th, be there, will be wild. Trump supporters responded immediately. Women for America First, a pro-Trump organizing group, had previously applied for a rally permit for January 22nd and 23rd in Washington, DC, several days after Joe Biden was to be inaugurated.

But in the hours after the tweet, they moved their permit to January 6th, two weeks before. This rescheduling created the rally where Trump would eventually speak. The next day, Ali Alexander, leader of the Stop the Steal organization and a key mobilizer of Trump supporters, registered Wildprotest.com, named after Trump’s tweet.

Wildprotest.com provided comprehensive information about numerous newly organized protest events in Washington. It included event times, places, speakers, and details on transportation to Washington DC. Meanwhile, other key Trump supporters, including far right media personalities, began promoting the wild protest on January 6th. [Begin videotape]

ALEX JONES: It’s Saturday, December 19th. The year is 2020, and one of the most historic events in American history has just taken place. President Trump, in the early morning hours today, tweeted that he wants the American people to march on Washington DC on January 6th, 2021.

That hearing similarly implied that Oath Keeper Kelly Meggs’ efforts to set up an alliance between the militias, which undoubtedly started at least days earlier, was a response to Trump’s tweet.

On December 19th at 10:22 a.m., just hours after President Trump’s tweet, Kelly Meggs, the head of the Florida Oath Keepers, declared an alliance among the Oath Keepers, the Proud Boys and the Florida Three Percenters, another militia group.

He wrote, we have decided to work together and shut this shit down. Phone records obtained by the Select Committee show that later that afternoon, Mr. Meggs called Proud Boys leader Enrique Tarrio, and they spoke for several minutes. The very next day, the Proud Boys got to work. The Proud Boys launched an encrypted chat called the Ministry of Self-defense.

That is, in places, the Committee encouraged this notion that everything pivoted on December 19 after that tweet.

But elsewhere, the Committee made it clear that the “muscle” and the militia were part of the plan from the start. Its fourth hearing on the Big Lie, for example, made clear that the earlier mobs were led by the very same people who seemingly sprung to action in response to Trump’s December 19 tweet.

[Ali Alexander]:

Let us in. Let us in. Let us in. Special session. Special session. Special session. We’ll light the whole shit on fire.

NICK FUENTES:

What are we going to do? What can you and I do to a state legislator besides kill him? Although, we should not do that. I’m not advising that, but I mean what else can you do? Right?

UNKNOWN:

The punishment for treason is death.

[End Videotape]

ADAM SCHIFF:

The state pressure campaign and the danger it posed to state officials and to State Capitols around the nation was a dangerous precursor to the violence we saw on January 6th at the US Capitol.

[snip]

The Select Committee has uncovered evidence in the course of our investigation that at stop the steal protests at state capitols across the country, there were individuals with ties to the groups or parties involved in the January 6th attack on the US Capitol. One of those incursions took place in the Arizona House of Representatives building, as you can see in this footage.

This is previously undisclosed video of protesters illegally entering and refusing to leave the building. One of the individuals prominently shown in this video is Jacob Chansley, perhaps better known as the QAnon Shaman. This rioter entered the Capitol on January 6th, was photographed leaving a threatening note on the dais in the US Senate chamber, and was ultimately sentenced to 41 months in prison after pleading guilty to obstruction of an official proceeding. Other protesters who occupied the Arizona House of Representatives building included — included Proud Boys, while men armed with rifles stood just outside the entrance.

And different parts of the seventh hearing showed that these ties are much better established, including through Roger Stone’s Friends of Stone listserv that started plotting immediately after the election.

Raskin: In the same time frame, Stone communicated with both the Proud Boys and the Oath Keepers regularly. The committee obtained encrypted content from a group – – from a group chat called Friends of Stone, FOS, which included Stone, Rhodes, Tarrio and Ali Alexander.

The chat focused on various pro-Trump events in November and December of 2020, as well as January 6th. As you can see here, Stewart Rhodes himself urged the Friends of Stone to have people go to their state capitols if they could not make it to Washington for the first million MAGA March on November 14th. These friends of Roger Stone had a significant presence at multiple pro-Trump events after the election, including in Washington on December the 12th. On that day, Stewart Rhodes called for Donald Trump to invoke martial law, promising bloodshed if he did not.

[snip]

JAMIE RASKIN: Encrypted chats obtained by the Select Committee show that Kelly Meggs, the indicted leader of the Florida Oath Keepers, spoke directly with Roger Stone about security on January 5th and 6th. In fact, on January 6th, Stone was guarded by two Oath Keepers who have since been criminally indicted for seditious conspiracy.

One of them later pleaded guilty and, according to the Department of Justice, admitted that the Oath Keepers were ready to use, quote, lethal force if necessary against anyone who tried to remove President Trump from the White House, including the National Guard. As we’ve seen, the Proud Boys were also part of the Friends of Stone Network.

Stone’s ties to the Proud Boys go back many years. He’s even taken their so-called fraternity creed required for the first level of initiation to the group.

[snip]

Katrina Pierson, one of the organizers of January 6th rally and a former campaign spokeswoman for President Trump, grew increasingly apprehensive after learning that multiple activists had been proposed as speakers for the January 6th rally. These included some of the people we discussed earlier in this hearing.

Roger Stone, a longtime outside advisor to President Trump; Alex Jones, the founder of the conspiracy theory website Infowars; and Ali Alexander, an activist known for his violent political rhetoric. On December 30th, Miss Pierson exchanged text messages with another key rally organizer about why people like Mr. Alexander and Mr. Jones were being suggested as speakers at the President’s rally on January 6th. Ms. Pierson’s explanation was POTUS, and she remarks that the President likes the crazies.

Remember that the Committee cut a good deal of their presentation focused on the militia in that seventh hearing to integrate more of Pat Cipollone’s testimony, which I think was one of the more unsuccessful planning decisions the Committee made.

Even still, taken as a whole, the Committee shows that the network around Roger Stone, which linked Ali Alexander, Alex Jones, and other movement activists to the militias (Jones had his own long-standing ties to the militias, including his former employee Joe Biggs), was riling up crowds starting immediately after the election, took concrete steps seemingly in response to Trump’s December 19 tweet, and continued to do so on January 6.

I mean, Roger Stone has been doing this since 2000.

In his most recent schema at least, Ari ignores all of that. Stone, Alexander, the militias, go unmentioned, and Trump’s role in the violence is limited to a single speech.

Which brings me back to the evidentiary gap that Ari and I share, seemingly in conjunction with the Committee.

In Ari’s telling, Donald Trump and Peter Navarro (with whom Ari has had a series of interviews) are the agents of this timeline. In his telling, Trump made an effort to “find a coup plotter” who would go further than his personal lawyer Rudy, who at least according to Hutchinson, had ties to the militias (though Powell is currently funding the legal defense of several Oath Keepers). Ari claimed that Powell was still on the campaign team, even though Rudy had explicitly and publicly stated she had no role on the campaign as early as November 22.

And Ari suggested that Trump adopted Powell’s plan, then either “back[ed] down” or “quit” it.

But as the January 6 Committee described it, it’s not really clear what happened; Pat Cipollone couldn’t even say whether Powell was appointed Special Counsel.

PAT CIPOLLONE: I don’t know what her understanding of whether she had been appointed, what she had been appointed to, Ok? In my view, she hadn’t been appointed to anything and ultimately wasn’t appointed to anything, because there had to be other steps taken. And that was my view when I left the meeting. But she may have a different view, and others may have a different view, and — and the president may have a different view.

To make matters worse, there are few if any credible witnesses here. Sidney Powell and her entourage (including Patrick Byrne, Mike Flynn, and an unnamed attorney) are batshit insane. So is Rudy. Cipollone, who gets treated as a grown-up, seems to be protecting Trump with his privilege claims. Meadows showed up later, but he’s a liar. Cassidy Hutchinson was texting details about the screaming and took a picture of Meadows escorting Rudy from the premises, but she is not known to have been in the meeting.

What seems common to all descriptions is that the Powell entourage showed up without an appointment and were let in by (as Ari notes) Peter Navarro aide Garrett Ziegler, though Patrick Byrne’s account describes two others being involved in their unplanned entry as well. That’s not a plan, it’s a pitch.

During the course of the meeting, Trump entertained the Powell plan because, he complained, Rudy and others were offering him nothing better.

UNKNOWN: So one of the other things that’s been reported that was said during this meeting was that President Trump told White House lawyers Mr. Herschmann and Mr. Cipollone that they weren’t offering him any solutions, but Ms. Powell and others were. So why not try what Ms. Powell and others were proposing? Do you remember anything along those lines being said by President Trump?

DEREK LYONS: I do. That sounds right.

ERIC HERSCHMANN: I think that it got to the point where the screaming was completely, completely out there. I mean, you got people walk in, it was late at night, had been a long day. And what they were proposing I thought was nuts.

RUDY GIULIANI: I’m gonna — I’m gonna categorically describe it as you guys are not tough enough. Or maybe I put it another way. You’re a bunch of pussies. Excuse the expression, but that — that’s I — I’m almost certain the word was used.

But the impression given by virtually all versions of this story (key versions linked below) is that by the end of the night, the White House lawyers and Rudy had mostly convinced Trump not to adopt this plan.

If that’s the case (and several people have backed that story under oath), this will be exculpatory if and when Trump ever goes to trial, not inculpatory. Entertaining a suspect idea — even the arguably legal one of appointing Jeffrey Clark to more aggressively pursue voter fraud claims, and especially a plan to seize the poll machines — but rejecting it on the advice of lawyers, even if Trump was persuaded to do so largely out of self-interest, is evidence someone is trying to stay inside the law, not break it. To be sure, there’s plenty of other evidence that Trump knowingly broke the law, but some of the most contentious meetings will actually be used in his defense. That just means prosecutors will find their proof of motive in places more directly tied to the crimes.

But the meeting accounts showing lawyers at least stalling on any decision about seizing the machines is where the trail goes dark.

No one has yet explained what happened between the time everyone left and the moment Trump’s tweet went out, and the understanding with which key planners adjusted their own timelines. Instead, we get narratives like Ari’s, or Jamie Raskin’s, that present the timing as proof that Trump took a third alternative — a pretty strong inference, undoubtedly — without an explanation of how the tweet got sent out or whether those involved knew where things would lead or who pitched Trump.

Not long after Sidney Powell, General Flynn, and Rudy Giuliani — Giuliani left the White House in the early hours of the morning, President Trump turned away from both his outside advisers’ most outlandish and unworkable schemes and his White House counsel’s advice to swallow hard and accept the reality of his loss.

Instead, Donald Trump issued a tweet that would galvanize his followers, unleash a political firestorm, and change the course of our history as a country. Trump’s purpose was to mobilize a crowd. And how do you mobilize a crowd in 2020? With millions of followers on Twitter, President Trump knew exactly how to do it. At 1:42 AM on December 19, 2020, shortly after the last participants left the unhinged meeting, Trump sent out the tweet with his explosive invitation.

Trump repeated his big lie and claimed it was “statistically impossible to have lost the 2020 election” before calling for a big protest in DC on January 6th, be there, will be wild. Trump supporters responded immediately. Women for America First, a pro-Trump organizing group, had previously applied for a rally permit for January 22nd and 23rd in Washington, DC, several days after Joe Biden was to be inaugurated.

But in the hours after the tweet, they moved their permit to January 6th, two weeks before. This rescheduling created the rally where Trump would eventually speak. The next day, Ali Alexander, leader of the Stop the Steal organization and a key mobilizer of Trump supporters, registered Wildprotest.com, named after Trump’s tweet.

Wildprotest.com provided comprehensive information about numerous newly organized protest events in Washington. It included event times, places, speakers, and details on transportation to Washington DC. Meanwhile, other key Trump supporters, including far right media personalities, began promoting the wild protest on January 6th. [Begin videotape]

It appears that both Powell’s contingent and Rudy left after midnight, with Meadows and Rudy together alone as Rudy left. Less than two hours later, that tweet went out, a tweet that was demonstrably central to both the organized and disorganized mobilization of the mob, one that has long been a focus of DOJ’s prosecutions (proof, among other proof, that Ari’s claim that DOJ has only focused on January 6 and the days immediately before it is false).

It’s certainly possible that after everyone left Peter Navarro came in, or maybe just Ziegler, and presented an alternative plan, a mob, but Ari presents no evidence that happened and it’s unlikely either Ziegler or Navarro would have been silent about their role in it. It’s more likely that Rudy and Meadows agreed they had to offer Trump another alternative, and they settled on January 6 (certainly, Meadows had advanced knowledge of Rudy’s plans for January 6). It’s possible that Trump had a late night call with someone else — Roger Stone or Bannon, maybe — who operationalized what came next. Maybe the dim-witted Meadows came up with the plan by himself.

Meadows, who refused to cooperate with the Committee, surely knows. Dan Scavino, who refused to cooperate, spent four years knowing what led up to most every tweet that Trump sent out. He also must know.

And while Ari doesn’t appear to know and I don’t either and the Committee doesn’t explain it if they know the answer, the one other place one might learn the answer is from those who turned existing infrastructure — the Stop the Steal effort, the permits — towards planning for January 6 (both of which DOJ has issued grand jury subpoenas to learn).

DOJ has been a bit coy about whether they know. That’s why I pointed to the remarkable use of the passive voice in Donohoe’s statement of offense in April, which virtually alone among January 6 filings obscures Trump’s role in announcing the riot on December 19, then turns immediately to Enrique Tarrio’s very hierarchical plan to instill discipline in the Proud Boys that didn’t exist at the December 12 MAGA March (the same trip to DC where Tarrio visited the White House as part of a Latinos for Trump visit).

On December 19, 2020, plans were announced for a protest event in Washington, D.C., on January 6, 2021, which protest would coincide with Congress’s certification of the Electoral College vote.

On or before December 20, 2020, Tarrio approached Donohoe and solicited his interest in joining the leadership of a new chapter of the Proud Boys, called the Ministry of Self Defense (“MOSD”). Donohoe understood from Tarrio that the new chapter would be focused on the planning and execution of national rallies and would consist of hand-selected “rally” boys. Donohoe felt privileged to be included and agreed to participate.

That happened “on or before” December 20, allowing for the possibility that the Proud Boys started to plan before Trump publicly announced the rally. Among other communications that DOJ likely has that the Committee has more limited access to are at least three versions of the Friends of Stone listserv (from Tarrio, Rhodes, and Owen Shroyer’s phones).

My instinct — based on all the evidence that these same people had been the muscle going back to the election — is that that’s where one could find the answer: Meadows, Scavino, Trump, Rudy, but also those who directed existing infrastructure towards January 6. But that’s just instinct. We still really don’t know for sure.

Presidents often adopt the plans of the last person in the room, and that’s probably more true with Trump than many of his predecessors. We know — or believe — that Sidney Powell and Rudy both left. Which means we don’t know who pitched Trump on the plan he ultimately adopted, the one that led directly to an attack on the Capitol.

There absolutely is a slew of evidence that that tweet made the difference, not just with the militias, but with disorganized conspirators and individuals who took Trump’s tweet as an order to make travel plans. It is absolutely the case that after that meeting, Trump took a fateful step (though that has been clear for at least a year). We just don’t know what led him to post that tweet.


Many of those people [Rudy, Meadows, Eastman] wanted pardons totally separate from the January 6 violence and that is important as we look at a different plot Trump’s effort to find a coup plotter would who go farther than Giuliani, his lawyer, Sidney Powell. She would go even farther. So the plan was to take her off the campaign team and try to install her inside the government to get the military to seize voting machines.

[snip]

Trump did back down on that very bad red illegal plan. And by the way, quitting an illegal coup would be a good thing, but this was the military plot: another conspiracy’s prong that hits a dead end. And this is key, because facing that dead end, late that same night of December 18th, Trump turned to the other plot pushed by Eastman and Navarro, posting what is by now an infamous tweet that announces the January 6 rally, beginning, quote, Peter Navarro releases 36-page report alleging election fraud ‘more than sufficient’ to swing victory to Trump. That was the lie Trump needed to build on when he summons the people to DC for the first time. Quote, big protest in DC on January 6th. Will be wild. Now that’s the first time Trump ever told supporters there was a place to come join this fight. And none of this happened in isolation. The evidence of Trump’s criminal intent is worse when all the facts are shown about the plot. Trump began the public operation to sabotage January 6 as a certified vote which was criminal, only after hitting this dead end in the failed plot to have the military help a coup. Now his lawyers warned him of the criminal issues here. Of the criminal intent and actions of that military plot. And he still moved, continuously, from that conspiracy to this one. Now, that’s damning evidence if prosecutors are indicting a broader conspiracy. And the White House aide connecting both plots is Navarro whose aide helped sneak in the military plotters there, then, he’s part of Trump’s January 6th announcement.

[A quote about seizing machines, ignores DHS]

This is something that Rudy Giuliani said would land them all in prison. Rudy Giuliani. He’s already lost his law license. We’ll see what else happens to him. But that is the context as we showed tonight: That when that fails, is the same time, the same night, that Donald Trump comes in and says, alright, I can’t abuse military power. I’m even being told by my most aggressive, lawless lawyers — the kind that he apparently prefers — that that’s not gonna work. So that’s when I bring muscle to January 6. But we have had, in this country, in our minds and apparently at the Justice Department as we reported tonight, a fixation on only looking here [post December 19]. On basically the 6th, or the lead-up to the 6th, or a few days out. And that’s understandable, given what we lived through. We’re human beings and the 6th was one of the worst attacks and one of the worst national security crises America has ever faced, from a domestic threat, let alone an incumbent outgoing President. The point tonight, which we’ve built on evidence, not anything but evidence, is that when you actually go all the way back, when you actually understand how this started, and how many different plots were pursued, thwarted, warned about, and then desperately doubled down upon, that goes to the criminal intent. Let me put it simply. Taken separately, some of these plots can be viewed like a gray area, clumsy plans that didn’t occur or the insurrection that exploded but also ended within one day. I’ll tell you something. The law makes it hard to pin an insurrection on one speech. As it should. But taken together, you have the evidence of this wider criminal conspiracy with criminal intent running across weeks if not more. Remember, in court, prosecutors have to prove criminal intent in a moment, just that you meant to do it. This is weeks of that with lawyers warning these were crimes, especially after the legal door was closed in mid-December when the Electoral College voted — everything after that, when it comes to overturning votes and installing fraudulent electors, that’s that illegal red zone. That’s where you see the evidence of several crimes. And taken together? Well, this evidence suggests the question is no longer whether there are any indictable election offenses here, but how prosecutors would explain a failure to indict and enforce the law and how that does risk letting the close call of this documented and attempted multi-prong coup conspiracy turn into a training exercise that American democracy may not survive.

 

Share this entry

The Discovery Refrigerator: When Joshua Schulte Social Engineered His Cellmate’s Brother

In advance of some other things, I want to look at the time that Joshua Schulte, who was convicted last week on nine counts related to stealing and leaking CIA files to WikiLeaks, social engineered the brother of his cellmate.

One of the charges on which the jury found Schulte guilty was sending WaPo reporter Shane Harris a warrant affidavit from the investigation into him, along with Schulte’s own narrative purportedly debunking the allegations made in the warrant. The jury found that Schulte’s description of two hundred people who might have access to the DevLAN backups and the network setup that would allow them that access was National Defense Information. Effectively, prosecutors argued and the jury agreed, Schulte was revealing CIA’s organizational structure and numbers of classified employees to a journalist. It’s a picayune Espionage count that because it likely won’t be treated as the same leak as the charge for sending CIA’s hacking tools, could add years to Schulte’s sentence.

Schulte sent the warrant affidavits along with a dangle, a promise to tell Harris some dirt about Russian oligarchs’ ties to Marc Kasowitz and Rudy Giuliani.

We have decided to share with you an initial exposé (depending on how the first one goes with you we will share up to nine more) involving Russian oligarchs, business ties and wire transfers involving hundreds of millions of dollars to Donald Trump’s closest advisers and law firms, including Giuliani and Mark Kasowitz firms. Trump’s self-reported best friend plays a starting role.

In cross-examination of FBI Agent Evan Schlessinger, Schulte suggested, credibly, that this dangle came from his cellmate, Omar Amanat.

Q. Well, you remember the ProtonMail email that referenced Marc Kasowitz, right?

A. Yes.

Q. OK. And there’s no relation between me and Marc Kasowitz, right?

A. No. You’re — not that I’m aware of.

Q. OK. Let’s talk about the cell search at the MCC. Now, in the cell search at the MCC, did you know what cell I was in?

A. Yes.

Q. And just real quick, you did know that there was a relationship between Mr. Amanat and Marc Kasowitz, right?

A. I know it was a — it’s connected to Mr. Amanat. I don’t know exactly how.

Q. OK.

A. Or how it relates to Mr. Amanat.

Of course, Schulte wasn’t charged for leaking information about Trump’s once and future lawyers. He was charged for sharing information about the CIA that — even if Amanat were the one who sent the email to Harris — would still mean Schulte shared it with Amanat, someone else who wasn’t cleared to receive it.

Plus, the record now shows that Schulte had been working with Omar Amanat and his brother, Irfan, to get these documents out.

An FBI interview of Schulte’s cousin, Shane Presnall, conducted just days before his first trial on January 13, 2020 but only released in April, explains that the Amanats were participating in the effort to publicize Schulte’s case starting as soon as Schulte and Amanat ended up in a cell together in December 2017. In fact, Presnall handed off Schulte’s warrants (it’s not clear whether this includes Schulte’s response, which is where the classified information was) to Amanat’s brother, Irfan, by leaving them in the fridge at the apartment he had shared with Schulte. (At the time, Irfan had been charged in the same fraud as Omar, but he was still out on pretrial release; since these events in 2018, both Omar and Irfan have been sentenced, served their time, and released.)

JS’s idea to get to press was to get court documents to get more attention to his case. JS told SP he was trying to create public outrage. When arrested in December 2017, another inmate in MCC, named Omar Amanat, told JS that Omar had media comments [sic] and that JS should send documents out and Omar will get them out. SP expressed skepticism about having a stranger do this. Then Omar’s cousin (Iffy) reaches out to SP via WhatsApp and says they have media contacts and can get documents out. When moving everything out of the apartment, SP put the documents in the bottom of the fridge in his apartment and informed Iffy where the where the documents would be. Iffy came and got the documents at JS’s apartment. Iffy confirmed to SP that Iffy got the documents. Iffy had the key because SP handed it to him.

Presnall was also communicating with reporters via Signal and a ProtonMail account, JohnGalt. But after he handed off the documents, he never heard from Irfan again.

But Schulte and the Amanats continued to work closely to get the documents out.

Just days before the ProtonMail dangle with the warrants was sent to Harris on September 24, the Samsung phone primarily used by Schulte texted Irfan on Signal. [This is a version of the Signal report, GX 822-1 as submitted in the first trial, but in which I replaced phone numbers with names and eliminated extraneous data; the righthand-most column shows who sent a particular text, the second-from-right is who received it.]

Schulte claimed to be Omar. He said that J — Schulte — needed “screen shots of Romania hack and Moscow.”

Irfan was understandably confused because, at the same time as someone claiming to be his brother was texting from the Samsung, someone else was calling him on what must be the iPhone that Omar primarily used.

Nevertheless, Irfan sent the files and only then did Schulte tell Omar’s brother he had pretended to be Omar to get Irfan to send files he had been trying to get from his cellmate.

Irfan and Schulte had a good laugh together about “master airhead” Omar, and then they got back to work on the documents they were working on.

Over the next two days Irfan and Schulte chatted away as they worked on various files, at several points, switching to group chat. At one point, Omar asked who “anonymous badger” is. “My bro?”

Here’s a picture of Omar’s side of that conversation, working on the Google doc via his iPhone while Schulte and Irfan worked from other locations, from one of the 2018 warrant affidavits tied to this part of the investigation.

On September 26, Schulte texted Irfan to say that Omar broke a screen (perhaps an exacerbation of the crack seen above) but that everything was still a go.

That’s the day when jailhouse informant Carlos Betances narced them out to the guard before they could do … something … in the law library.

Q. Mr. Betances, did there come a time when you learned of an effort to take the Samsung somewhere else in the jail?

A. Yes.

Q. And what did you learn about that?

A. That they were going to pay this friend of mine, Flaco, 200 bucks to take it down to the library that day.

Q. And who wanted to pay to bring the phone to the library?

MR. SCHULTE: Objection. Hearsay.

THE COURT: How did you learn about that information?

THE WITNESS: Because Flaco told me.

[snip]

BY MR. LOCKARD: Q. Mr. Betances, did you observe anything about Mr. Schulte’s or Omar’s behavior around that time?

A. Yes. They were very wary. They wanted to go down to the library then, and — so once I realized that they wanted to go down there, I threw this little piece of paper at the guard who was right there, and letting him know that something was going to happen in the library, that he could — he should —

THE INTERPRETER: Interpreter correction. A. — that he should conduct a search or everybody should go down and figure out what was about to happen. So that is what happened. When Josh and Omar came up, they said something had happened, that there was a search, there had been a search in the library, but they never found out that I was the one who had prevented that from happening.

Q. And did you hear Mr. Schulte or Omar discuss why they wanted the phone in the library?

MR. SCHULTE: Objection.

THE COURT: Overruled.

A. They wanted to send something very important. I don’t know what it was, but it was important. They had spent a week, a long time with the phones. They would give me the phone back very late at night with a very low charge.

Over the course of the next few days, as one after another of the detainees in on the contraband phone gig got caught and put into the SHU, it seemed that Omar came to rely on the Samsung (the first of the contraband phones was seized on September 26) to send Irfan gloomy texts. What appears to be Omar asks Irfan to call Carlos’ son to let the son know they’d put $500 in his father’s commissary fund, something that Betances testified to at the second trial, claiming he newly remembered just last month being offered a $5,000 bribe through the air conditioning pipes to stay quiet.

So as the brothers allegedly discussed arranging paying off the guy who narced them out, they also discussed what Harris has received. “How much to carlo,” Irfan asked about the payment. “Washpo has em,” Omar discussed the documents.

The very last Signal text sent on the phone, on a day when Schulte was definitely in SHU but Omar was not yet, was a text from Omar to Harris, asking if they could shift to a different ProtonMail address, [email protected].

It’s a point Schulte made at trial: When that last text was sent, he was in SHU. He couldn’t have sent it.

According to Agent Schlessinger, there was no activity on the ProtonMail account Schulte had described in his notebook setting up on August 21, Annon1204, after Schulte was put in SHU. While Schulte pointed to a follow-up, on Annon1204, on September 26 that he suggested must have come from Omar, the switch to a different ProtonMail account after Schulte was moved overnight on October 1 is consistent with Omar not having the password for Annon1204, and so moving the ongoing conversation with Harris to another ProtonMail account, psalms100.

The entire (resumed) conversation with Shane Harris started with Schulte pretending to be Anonymous, partly in an effort to get Harris to send documents that Schulte’s family had already been warned, by the FBI, not to release publicly. Along the way, Schulte pretended to be Omar and then Omar pretended to be Schulte pretending to be Anonymous.

It was a grand scheme across contraband cell phones and Google docs to send out a bunch of documents. One of which, the jury has now issued their verdict, constituted a very costly crime.

Share this entry

What DOJ Was Doing While You Were Wasting Time Whinging on Twitter

Because people are so desperate for information on investigations into Trump, they’re over-reading articles to see only the most panic-inducing details.

So I wanted to collect all the known details of investigative steps against Trump and his associates. This will be a running thread.

Note that while I’ve focused on named subjects, these investigations absolutely intersect. That’s readily apparent with the fake electors investigation, but less so with the “Stop the Steal” nexus (best seen in the Ali Alexander entry below; which is where I’m putting some movement activists who played key roles). Those who were speakers on January 5, VIPs who were removed from the speaker’s list on January 6, or who were on Stone’s Friends of Stone or Alexander’s Stop the Steal lists often had roles both in ginning up mobs in states or advance planning for events at the Capitol on January 6 and played some role as things rolled out that day. These people would likely be the “influencers” identified in the investigative plan put together before Michael Sherwin left.

Rudy Giuliani

April 13, 2021: SDNY obtains historic and prospective cell site warrant for Rudy.

April 21, 2021: Warrants for Ukraine-related investigation approved. This was Lisa Monaco’s first day as Deputy Attorney General. The temporal scope on the Ukraine warrants extends from August 1, 2018 through May 31, 2019.

April 28, 2021: Warrants executed. Around 18 devices seized, of which 16 can be cracked.

September 3, 2021: SDNY argues that the privilege review for Rudy’s devices must be conducted pre-scope (meaning, before just the information on Ukraine is identified) and generously offers to limit temporal range of review to items post-dating January 1, 2018, significantly expanding the temporal scope of the privilege review vis a vis the known warrants.

September 16, 2021: Judge Paul Oetken approves SDNY’s desired treatment of Rudy’s phones, meaning anything that post-dates January 1, 2018, regardless of topic, will be reviewed for privilege.

November 2, 2021: Special Master releases contents of 7 devices, for which privilege review extended through seizure. 2,223 items were provided to the government.

January 15, 2022: WaPo quotes Rob Jenkins, who represents a number of Proud Boy defendants, explaining that DOJ is asking about Roger Stone and Rudy Giuliani’s ties to militia members.

January 19, 2022: Special Master releases contents through April 2021 of one phone amounting to over 25,000 items, as well as eight other devices for which the privilege review extended from December 1, 2018 through May 31, 2019.

April 12, 2022: In guise of coming to a final decision on the Ukraine influence-peddling that hasn’t happened yet, DOJ asks Rudy to unlock last several devices.

May 26, 2022: Subpoenas (CNN, NYT) relating to the fake elector plot ask for information on:

  • Rudy Giuliani,
  • Boris Epshteyn
  • Justin Clark
  • John Eastman
  • Bernard Kerik
  • Joe diGenova
  • Victoria Toensing
  • Jenna Ellis
  • Kenneth Chesebro

July 22, 2022: In grand jury testimony, Marc Short and (earlier) Greg Jacob are asked about Rudy and Eastman.

Roger Stone

March 17, 2021: In response to motion for bail for Connie Meggs, DOJ includes picture showing both she and Graydon Young worked a Roger Stone event on December 14, 2020.

June 23, 2021: Oath Keeper Graydon Young, who interacted with Stone in Florida in December 2020, enters into a cooperation agreement.

June 30, 2021: Oath Keeper Mark Grods, who worked the Willard the morning of the insurrection, enters into a cooperation agreement.

September 15, 2021: Oath Keeper Jason Dolan, who guarded Stone in both Florida and DC and would have witnessed discussions between Kelly Meggs and Roger Stone in December, enters into a cooperation agreement.

January 15, 2022: WaPo quotes Rob Jenkins, who represents a number of Proud Boy defendants, explaining that DOJ is asking about Roger Stone and Rudy Giuliani’s ties to militia members.

March 2, 2022: Oath Keeper Joshua James, who oversaw security of Stone on the morning of January 6 and reported back frequently, enters into a cooperation agreement. James also provides statement to NYPD inquiry of Stone associate Sal Greco.

March 4, 2022: WaPo describes hours of documentary video tracking Stone’s events leading up to the attack, including details from a Friends of Stone list on which Stone started planning Stop the Steal immediately after the election. Both DOJ and January 6 sought the outtakes, with Oath Keeper prosecutor Jeffrey Nestler offering to fly to Denmark to make the request. [Note this entry has been corrected to reflect ongoing efforts to get the footage.]

May 2022: NYT describes more about the FOS list, confirming that Owen Shroyer, Enrique Tarrio, Stewart Rhodes, and Ivan Raiklin took part. By June 23, 2022, DOJ had extracted the contents of Shroyer, Tarrio, and Rhodes’ phones.

Sidney Powell

June 2021: Nikki Fried announces Sidney Powell’s Defending the Republic had been raising funds in Florida without registering as a charity.

August 24, 2021: Powell’s fund settles with Florida.

September 2021: AUSA Molly Gaston issues subpoena for records relating to Sidney Powell’s grift going back to November 2, 2020.

November 30, 2021: Several outlets report on subpoenas relating to Powell. (WaPo, Daily Beast)

January 22, 2022: Powell’s attorney claims to be “cooperating” with DOJ investigation.

June 22, 2022: Months after BuzzFeed and Mother Jones report on the scheme, DOJ asks Judge Amit Mehta to conduct conflict inquiry regarding Powell’s funding of Oath Keeper defendants’ defense.

Alex Jones

April 13, 2021: Jones videographer Sam Montoya arrested on trespassing charges related to January 6.

August 19, 2021: Jones sidekick and January 5 speaker Owen Shroyer arrested for violating a non-prosecution agreement by trespassing; Shroyer did not enter the Capitol.

January 20, 2022: Judge Tim Kelly denies Shroyer’s motion to dismiss, effectively agreeing with DOJ that Shroyer (and so Alexander and Jones) weren’t invited by cops to the East steps and didn’t de-escalate the crowd. According to his pre-released testimony, Alexander had claimed they were de-escalating in his sworn testimony to the January 6 Committee.

May 5, 2022: Montoya asks for 60 day extension to discuss plea deal.

May 9, 2022: At status hearing, Shroyer attorney Norm Pattis describes talks of a plea deal.

June 14, 2022: Long-time Jones attorney Norm Pattis, who is representing Owen Shroyer, joins Joe Biggs’ defense team.

June 23, 2022: DOJ provides Shroyer unscoped contents of his phone, to provide scoped contents later.

Ali Alexander

January 25, 2021: Brandon Straka arrested for trespassing and civil disorder. Straka was a key player in the Stop the Steal movement, playing a key role at the riot at the TCF vote counting center in Michigan after the election, spoke at the January 5 rally, sat next to Mike Flynn at Trump’s speech, and stopped at the Willard before heading to the riot. Straka was also on Alexander’s Stop the Steal LISTSERV.

February 17, 2021: First FBI interview with Straka.

March 25, 2021: Second interview with Straka.

December 8, 2021: In released testimony for an appearance before J6C, Alexander told a story that DOJ had already debunked in the Owen Shroyer case. For this and other appearances, Alexander was represented by Paul Kamenar, the same attorney that guided Andrew Miller through stalling the Mueller investigation for a year.

January 5, 2022: Third interview with Straka.

January 13, 2022: DOJ includes sealed cooperation memo in Straka’s sentencing memo.

April 19, 2022: After 15 months of continuations, Anthime “Baked Alaska” Gionet charged with a single trespassing charge, a charge understood to have required some cooperation in advance.

May 11, 2022: Anthime “Baked Alaska” Gionet balks at a plea hearing for a cooperative misdemeanor plea. It is understood that Gionet shared certain materials to avoid a felony indictment. Gionet was given two months (until July 22) to plead to the misdemeanor or face the prospect of felony charges relying on his cooperation.

June 24, 2022: Ali Alexander testifies before grand jury.

June 28, 2022: Alexander returns to DC.

Jeffrey Clark

Note there are two Trump lawyers named Clark: Jeffrey is the DOJ official who would have replaced Jeffrey Rosen . Justin worked on campaign issues. [Really bad error corrected.]

January 25, 2021: DOJ IG Michael Horowitz opens probe into whether current or former DOJ officials attempted to overturn the election.

July 26, 2021: Associate Deputy Attorney General Bradley Weinsheimer writes former top Trump DOJ officials permitting them to testify on efforts, led by but not limited to Clark, to involve DOJ in an attempt to overturn the election. This was the first of a series of Executive Privilege review waivers DOJ asked Biden to make and roughly coincided with the delayed institution of a Contact Policy preventing Biden from learning about investigations.

June 22, 2022: Agents search Clark’s home and seize his devices. Per CNN, DOJ IG coordinated with the wider investigation into January 6.

John Eastman

March 28, 2022: Judge David Carter rules it is more likely than not that Eastman and Trump conspired to obstruct the vote certification. DOJ would be able to obtain any emails Judge Carter released directly from Chapman University covertly.

May 26, 2022: Subpoenas (CNN, NYT) relating to the fake elector plot ask for information on:

  • Rudy Giuliani,
  • Boris Epshteyn
  • Justin Clark
  • John Eastman
  • Bernard Kerik
  • Joe diGenova
  • Victoria Toensing
  • Jenna Ellis
  • Kenneth Chesebro

June 28, 2022: FBI seizes Eastman’s phone, gets him to unlock it.

July 22, 2022: In grand jury testimony, Marc Short and (earlier) Greg Jacob are asked about Rudy and Eastman.

Fake Electors

Fall 2021: According to NYT, Thomas Windom assigned, “to pull together some of the disparate strands of the elector scheme.”

January 25, 2022: Lisa Monaco confirms on the record that DOJ is investigating the fake elector scheme.

May 26, 2022: Subpoenas (CNN, NYT) relating to the fake elector plot ask for information on:

  • Rudy Giuliani,
  • Boris Epshteyn
  • Justin Clark
  • John Eastman
  • Bernard Kerik
  • Joe diGenova
  • Victoria Toensing
  • Jenna Ellis
  • Kenneth Chesebro

June 21, 2022: On July 25, 2022, WaPo published subpoenas to AZ fake electors Karen Fann and Kelly Townsend. In addition to AZ-specific list and the already published list of names of interest, those add:

  • James Troupis
  • Joshua Findlay
  • Mike Roman

June 22, 2022: DOJ takes a slew of overt steps in their investigation into the fake electors:

  • WaPo: Law enforcement activity targeting GA lawyer Brad Carver and Trump staffer Thomas Lane, subpoenas for GA GOP Chair David Shafer and Michigan fake electors
  • NYT: Subpoenas to Trump campaign aide in MI, Shawn Flynn, as well as Carver, Lane, and Shafer
  • CBS: Search warrants for NV GOP Chair Michael McDonald and Secretary James DeGraffenreid
  • CNN: Subpoena for Shafer, a warrant for David Carver’s phone, information on a GA Signal chat

July 8, 2022: Due date for June 21 subpoenas.

July 13, 2022: Talks between J6C and DOJ about sharing transcripts prioritizes fake electors scheme.

The Mark Meadows Gap

As I was writing this timeline, I realized that, aside from efforts on behalf of the Archives to force Meadows to reconstruct the insurrection he carried out on his personal phone and email, we really do have little information about an active investigation into Meadows’ role in the plot. That may explain why DOJ had not considered interviewing Cassidy Hutchinson before they saw her testimony.

Meadows should be included in the fake electors investigation, but thus far, he’s not. He would be included in any DOJ investigation of pressure in Georgia, but thus far, it seems DOJ has let Fani Willis take the lead on that investigation.

With the exception of Scott Perry, Meadows would be an absolutely necessary pivot to members of Congress who conspired in an attack on their own institution.

Additionally, there are credible allegations of obstruction against Meadows — for replacing his phone, likely deleting Signal and other encrypted app texts, after the FBI investigation started; for burning documents; for pressuring Hutchinson not to testify.

All that said, while Meadows is undeniably the most important gap in this timeline, Trumpsters are predicting that Meadows will go to jail, citing not just his own schemes, but his finances.

Steve Bannon

September 23, 2021: January 6 Committee subpoenas Bannon.

November 3 and 8, 2021: At interviews Bannon attorney Robert Costello did with DC US Attorney’s Office, at which FBI Agents were present, he gives materially inconsistent answers.

November 11, 2021: DOJ obtains Internet and telephony toll records for Robert Costello spanning from March 5 through November 12, which cannot pertain exclusively to the subpoena from a Committee the founding of which came months after the start date of toll request.

November 2021: DOJ subpoenas the toll records for two people — one is a financial advisor — under whose accounts he was believed to communicate in the past; DOJ provided these in discovery on July 8, 2022. The scope for at least one of the subpoenas is for September 22, 2021 through October 21, 2021.

November 12, 2021: DOJ indicts Bannon for contempt.

December 2, 2021: After DOJ raises concerns about Costello serving as a witness, he joins Bannon’s legal team until just before trial.

June 29, 2022: Pursuant to a trial subpoena, DOJ interviews Trump attorney Justin Clark about circumstances of Bannon’s non-compliance.

July 22, 2022: Jury finds Bannon guilty of both counts of contempt.

Peter Navarro

June 2, 2022: DOJ indicts Navarro on two counts of contempt.

Stolen classified documents

February 18, 2022: NARA informs Oversight Chair Carolyn Maloney that there were classified documents among the 15 boxes taken to Mar-a-Lago.

February 22, 2022: Merrick Garland implies DOJ will investigate the mishandled documents.

April 7, 2022: Because DOJ opened investigation into documents, NARA refuses request for more information from Maloney.

May 12, 2022: DOJ issues subpoena to NARA regarding documents and requests interviews with those involved in packing boxes before leaving the White House.

Other key dates

January 4, 2021: DC authorities seize Enrique Tarrio’s phone.

January 8, 2021: Grand jury that carries out bulk of investigation on Capitol and ultimately charges Oath Keepers with sedition convened.

May 25, 2021: Grand jury that indicted Bannon, handful of Jan6ers convened.

August 11, 2021: Grand jury that indicted Michael Riley (Capitol Policeman), several serious defendants (including a superseding) convened.

Summer 2021: FBI interviewed Doug Mastriano about January 6.

October 21, 2021: In Congressional hearing, Merrick Garland makes clear that the OLC memo prohibiting the prosecution of a sitting President is not pertinent to whether Trump can be charged.

November 10, 2021: Still-active grand jury indicting more serious ongoing assault cases, among others, convened.

November 22, 2021: In hearing in Garret Miller case, Judge Carl Nichols asks AUSA James Pearce whether DOJ’s application of 18 USC 1512(c)(2) to the vote certification could apply to someone like Trump. Nichols would go on to be the lone DC judge to reject this application.

December 2021: FBI first gets access to Tarrio’s phone.

December 10, 2021: Judge Dabney Friedrich is the first DC Judge to uphold DOJ’s application of 18 USC 1512(c)(2) to the certification of the vote, the same crime discussed for use with Trump.

January 5, 2022: Garland promises DOJ, “remains committed to holding all January 6th perpetrators, at any level, accountable under law — whether they were present that day or were otherwise criminally responsible for the assault on our democracy. We will follow the facts wherever they lead” and describes, “follow[ing] the money.”

January 12, 2022: DOJ charges Oath Keepers with sedition (and adds Stewart Rhodes to conspiracy).

Mid-January 2022: After filter review, DOJ first obtains materials from Tarrio’s phone that was seized over a year earlier.

January 19, 2022: SCOTUS rejects Trump’s bid to shield January 6 records under Executive Privilege. Not only will J6C get subpoenaed materials directly, but DOJ will be able to obtain the same materials directly, using privilege waiver Biden made for the Committee without violating contact rules.

February 14, 2022: Grand jury that charges Proud Boys with sedition convened.

February 15, 2022: Grand jury that charges Peter Navarro convened.

February 18, 2022: Judge Mehta denies Trump’s motion to dismiss various lawsuits, finding it plausible that Trump conspired with rioters at the Capitol, that he conspired with the militias who attacked the Capitol, and that he has aid and abet liability for assaults at the Capitol, including on cops.

March 3, 2022: Judge Carl Nichols holds that 18 USC 1512(c)(2) must have a documentary component and applies the rule of lenity to dismiss obstruction charge against Garret Miller. In briefing in this case, Nichols had hypothetically asked whether the law could apply to the then-President.

March 7, 2022: DOJ adds Enrique Tarrio to Proud Boy Leaders conspiracy.

March 28, 2022: Judge David Carter rules it is more likely than not that Eastman and Trump conspired to obstruct the vote certification.

May 25, 2022: Garland issues memo affirming that the same rules that always apply to DOJ investigations still apply to DOJ investigations.

June 6, 2022: DOJ charges Proud Boy leaders with sedition.

June 28, 2022: Testimony of Cassidy Hutchinson said to “jolt” DOJ to discuss Trump crimes other than those tied to inspiring rioters, though that report also says that, “change that was underway even before Ms. Hutchinson’s testimony.”

June 29, 2022: In a public appearance, Lisa Monaco says, Congress “is doing their job and we’re doing ours” and describes that DOJ is “deep” into its January 6 probe.

July 15, 2022: After declining to prosecute Mark Meadows for contempt in June, DOJ weighs in on Meadows lawsuit against J6C to opine that Hutchinson’s testimony demonstrated that the Committee is unable to obtain necessary information from other sources.

July 20, 2022: In response to a question about whether DOJ guidance on opening sensitive investigations would be affected if Trump announced he was running, Lisa Monaco reiterates that DOJ would follow the facts, “no matter where they lead, no matter to what level.”

July 21, 2022: Merrick Garland suggests that those who claim DOJ should, but is not, doing a hub-and-spoke investigation are speculating, and calls the investigation “the most wide-ranging” investigation that the Justice Department has ever entered into.

July 22, 2022: Marc Short appears before a grand jury (Greg Jacob did by July 22 as well).

Share this entry